[rsyslog] rsyslog 5.3.6 (v5-beta) released
Rainer Gerhards
rgerhards at hq.adiscon.com
Fri Jan 15 14:32:43 CET 2010
> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Michael Biebl
> Sent: Friday, January 15, 2010 8:42 AM
> To: rsyslog-users
> Subject: Re: [rsyslog] rsyslog 5.3.6 (v5-beta) released
>
> 2010/1/15 <david at lang.hm>:
>
> > I think I just realized the problem
> >
> > you have
> >
> > :programname, contains, "NetworkManager" /var/log/NetworkManager.log
> > ~
> > :programname, contains, "wpa_supplicant" /var/log/NetworkManager.log
> > ~
> >
> > when you should have
> >
> > :programname, contains, "NetworkManager" /var/log/NetworkManager.log
> > & ~
> > :programname, contains, "wpa_supplicant" /var/log/NetworkManager.log
> > & ~
> >
> > give that a shot.
>
> The error message goes away but rsyslog still logs nothing.
>
> Interesting fact is, that the above syntax worked fine with 4.4.2
I don't think so, you probably ignored (did not record?) the error message.
The tilde character is an action, and an action needs to be placed after a
filter. So a tilde character just on its own in a single line is definitely a
syntax error. The engine would not know what to do with such a line.
If it generated no error in v4.4.2, *that* was a bug (will verify later).
Rainer
More information about the rsyslog
mailing list