[rsyslog] snmp traps

[Rainer Gerhards]

Just a quick thought: The double quotes in "WARNING" are invalid. Double
quotes are reserved for future functionality not yet implemented. Use single
quotes 'WARNING'. This may or may not be the solution.

HTH
Rainer 

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com 
> [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of 
> Kanwar Ranbir Sandhu
> Sent: Thursday, May 28, 2009 9:04 PM
> To: rsyslog at lists.adiscon.com
> Subject: [rsyslog] snmp traps
> 
> Hello All,
> 
> This is my first post to the list - yeah!  :)
> 
> I'm trying to use the snmp support in rsyslog to generate traps for
> specific syslog messages.  Here's the filter I'm using:
> 
> if $syslogfacility-text == 'local6' and $syslogseverity-text ==
> "WARNING" then  :omsnmp:
> 
> This is all on one line in the actual config.
> 
> When I reload/restart rsyslog, it complains:
> 
> syslogd: the last error occured in /etc/rsyslog.conf, line 76
> 
> I have the module loading, and I've set the trap community 
> and trap host
> parameters.  I don't see any errors for those, so I've 
> assumed I've done
> that bit right.
> 
> I don't see what's wrong with my filter.  Am I using the snmp feature
> correctly?  That is, I can I use snmp in an expression based filter?
> 
> My rsyslog version is 3.21.10 on CentOS 5 host (I've rebuilt 
> it from the
> Fedora 10 rsyslog package).
> 
> Thanks,
> 
> Ranbir
> 
> -- 
> Kanwar Ranbir Sandhu
> Linux 2.6.27.21-170.2.56.fc10.x86_64 x86_64 GNU/Linux 
> 14:57:23 up 4 days, 16:07, 4 users, load average: 1.22, 0.55, 0.24 
> 
> 
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
>