[rsyslog] rsyslog 5.3.6 (v5-beta) released
Rainer Gerhards
rgerhards at hq.adiscon.com
Fri Jan 15 15:33:10 CET 2010
Michael,
I could reproduce the original bug report, now a bugzilla entry:
http://bugzilla.adiscon.com/show_bug.cgi?id=169
I guess you don't see any entries in /var/log/syslog simply because rsyslog
hangs and so is unable to process any further message. I suggest you
subscribe to the bug in bugzilla.
Rainer
> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Rainer Gerhards
> Sent: Friday, January 15, 2010 3:24 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] rsyslog 5.3.6 (v5-beta) released
>
> Michael,
>
> > -----Original Message-----
> > From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> > bounces at lists.adiscon.com] On Behalf Of Michael Biebl
> > >> > :programname, contains, "NetworkManager"
> > /var/log/NetworkManager.log
> > >> > ~
> > >> Interesting fact is, that the above syntax worked fine with 4.4.2
> > >
> > > I don't think so, you probably ignored (did not record?) the error
> > message.
> > > The tilde character is an action, and an action needs to be placed
> > after a
> > > filter. So a tilde character just on its own in a single line is
> > definitely a
> > > syntax error. The engine would not know what to do with such a
> line.
> > >
> > > If it generated no error in v4.4.2, *that* was a bug (will verify
> > later).
> >
> > It definitely worked with 4.4.2, i.e. the
> > NetworkManager/wpa_supplicant messages were discarded.
>
> I used a Debian 5 I had available here, ran apt-get update/upgrade and
> compiled rsyslog 4.4.2 from scratch. Then I entered the first line into
> the
> config and restarted rsyslog.
>
> After doing so, I had the relevant errors in /var/log/syslog.
>
> Two observations:
>
> a) the commands were flagged as invalid by 4.4.2
> b) error messages are logged (at least up to 4.4.2)
>
> Note that I had the statements directly in my main config. Can you
> verify you
> get the error messages, too, when you have them directly in the main
> config?
>
> I'll now see if v5 does not emit the messages...
>
> Rainer
>
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
More information about the rsyslog
mailing list