[rsyslog] rsyslog 5.3.6 (v5-beta) released

Michael Biebl mbiebl at gmail.com
Fri Jan 15 16:02:30 CET 2010


2010/1/15 Rainer Gerhards <rgerhards at hq.adiscon.com>:
> Michael,
>
>> -----Original Message-----
>> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
>> bounces at lists.adiscon.com] On Behalf Of Michael Biebl
>> >> > :programname, contains, "NetworkManager"
>> /var/log/NetworkManager.log
>> >> > ~
>> >> Interesting fact is, that the above syntax worked fine with 4.4.2
>> >
>> > I don't think so, you probably ignored (did not record?) the error
>> message.
>> > The tilde character is an action, and an action needs to be placed
>> after a
>> > filter. So a tilde character just on its own in a single line is
>> definitely a
>> > syntax error. The engine would not know what to do with such a line.
>> >
>> > If it generated no error in v4.4.2, *that* was a bug (will verify
>> later).
>>
>> It definitely worked with 4.4.2, i.e. the
>> NetworkManager/wpa_supplicant messages were discarded.
>
> I used a Debian 5 I had available here, ran apt-get update/upgrade and
> compiled rsyslog 4.4.2 from scratch. Then I entered the first line into the
> config and restarted rsyslog.
>
> After doing so, I had the relevant errors in /var/log/syslog.
>
> Two observations:
>
> a) the commands were flagged as invalid by 4.4.2
> b) error messages are logged (at least up to 4.4.2)

Yeah, false alarm from my side, sorry.

4.4.2 writes an error message about using incorrect syntax and the log
messages are not dropped when using a simple "~". Everything as it
should be :-)
So this was all a red herring.

The real problem, as you already noticed, the non-working pipe which
causes 5.3.6 to hang and not process any further message.

Michael


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?



More information about the rsyslog mailing list