[rsyslog] rsyslog 5.3.6 (v5-beta) released
Rainer Gerhards
rgerhards at hq.adiscon.com
Fri Jan 15 15:23:34 CET 2010
Michael,
> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Michael Biebl
> >> > :programname, contains, "NetworkManager"
> /var/log/NetworkManager.log
> >> > ~
> >> Interesting fact is, that the above syntax worked fine with 4.4.2
> >
> > I don't think so, you probably ignored (did not record?) the error
> message.
> > The tilde character is an action, and an action needs to be placed
> after a
> > filter. So a tilde character just on its own in a single line is
> definitely a
> > syntax error. The engine would not know what to do with such a line.
> >
> > If it generated no error in v4.4.2, *that* was a bug (will verify
> later).
>
> It definitely worked with 4.4.2, i.e. the
> NetworkManager/wpa_supplicant messages were discarded.
I used a Debian 5 I had available here, ran apt-get update/upgrade and
compiled rsyslog 4.4.2 from scratch. Then I entered the first line into the
config and restarted rsyslog.
After doing so, I had the relevant errors in /var/log/syslog.
Two observations:
a) the commands were flagged as invalid by 4.4.2
b) error messages are logged (at least up to 4.4.2)
Note that I had the statements directly in my main config. Can you verify you
get the error messages, too, when you have them directly in the main config?
I'll now see if v5 does not emit the messages...
Rainer
More information about the rsyslog
mailing list