[rsyslog-notify] Forum Thread: Re: RainerScript filters and output channels - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Tue Sep 16 08:51:45 CEST 2014
User: balar
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24931#p24931
Message:
----------
Hi Rainer, I ran rsyslogd with -d option, and it generated a lot of output
on tty which I have captured in a file. Since the lines are a lot, the file
is present as an attachment
Here is the syslog config file:
$outchannel root,/var/log/agalaxy/agalaxy.log,
50000000,/usr/local/bin/logrot.py /var/log/agalaxy/agalaxy.log 10
$outchannel inventory,/var/log/agalaxy/inventory.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/inventory.log 10
$outchannel slb,/var/log/agalaxy/slb.log, 10000000,/usr/local/bin/logrot.py
/var/log/agalaxy/slb.log 10
$outchannel auth,/var/log/agalaxy/auth.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/auth.log 10
$outchannel scheduler,/var/log/agalaxy/scheduler.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/scheduler.log 10
$outchannel healthmonitor,/var/log/agalaxy/healthmonitor.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/healthmonitor.log 10
$outchannel event_amqp,/var/log/agalaxy/event_amqp.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/event_amqp.log 10
$outchannel event_correlator,/var/log/agalaxy/event_correlator.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/event_correlator.log 10
$outchannel event_snmp_receiver,/var/log/agalaxy/event_snmp_receiver.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/event_snmp_receiver.log
10
$outchannel
event_syslog_receiver,/var/log/agalaxy/event_syslog_receiver.log,
10000000,/usr/local/bin/logrot.py
/var/log/agalaxy/event_syslog_receiver.log 10
$outchannel event_manager,/var/log/agalaxy/event_manager.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/event_manager.log 10
$outchannel event_logger,/var/log/agalaxy/event_logger.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/event_logger.log 10
$outchannel alarm_logger,/var/log/agalaxy/alarm_logger.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/alarm_logger.log 10
$outchannel device_configuration,/var/log/agalaxy/device_configuration.log,
10000000,/usr/local/bin/logrot.py /var/log/agalaxy/device_configuration.log
10
#=====================================================
local1.* :omfile:$root
if $syslogfacility-text == 'local2' and $msg contains '[ag_inventory]' then
:omfile:$inventory
if $syslogfacility-text == 'local2' and $msg contains '[ag_slb]' then
:omfile:$slb
if $syslogfacility-text == 'local2' and $msg contains '[ag_auth]' then
:omfile:$auth
if $syslogfacility-text == 'local2' and $msg contains '[ag_scheduler]' then
:omfile:$scheduler
if $syslogfacility-text == 'local2' and $msg contains '[ag_healthmonitor]'
then :omfile:$healthmonitor
if $syslogfacility-text == 'local2' and $msg contains '[ag_event_amqp]'
then :omfile:$event_amqp
if $syslogfacility-text == 'local2' and $msg contains
'[ag_event_correlator]' then :omfile:$event_correlator
if $syslogfacility-text == 'local2' and $msg contains
'[ag_event_snmp_receiver]' then :omfile:$event_snmp_receiver
if $syslogfacility-text == 'local2' and $msg contains
'[ag_event_syslog_receiver]' then :omfile:$event_syslog_receiver
if $syslogfacility-text == 'local2' and $msg contains '[ag_event_manager]'
then :omfile:$event_manager
if $syslogfacility-text == 'local2' and $msg contains '[ag_event_logger]'
then :omfile:$event_logger
if $syslogfacility-text == 'local2' and $msg contains '[ag_alarm_logger]'
then :omfile:$alarm_logger
if $syslogfacility-text == 'local2' and $msg contains
'[ag_device_configuration]' then :omfile:$device_configuration
The last few lines from the debug output of rsyslogd:
80: IF
9125.731992783:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.731998982:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732037510:7f06ec8f0780: AND
9125.732040645:7f06ec8f0780: var '$msg'
9125.732046223:7f06ec8f0780: CONTAINS
9125.732050564:7f06ec8f0780: string '[ag_inventory]'
9125.732057740:7f06ec8f0780: THEN
9125.732059432:7f06ec8f0780: ACTION 0xb06050
[builtin:omfile::omfile:$inventory]
9125.732065493:7f06ec8f0780: END IF
9125.732067469:7f06ec8f0780: IF
9125.732069272:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732075442:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732114193:7f06ec8f0780: AND
9125.732117279:7f06ec8f0780: var '$msg'
9125.732122978:7f06ec8f0780: CONTAINS
9125.732127378:7f06ec8f0780: string '[ag_slb]'
9125.732134631:7f06ec8f0780: THEN
9125.732136363:7f06ec8f0780: ACTION 0xb069c0
[builtin:omfile::omfile:$slb]
9125.732139658:7f06ec8f0780: END IF
9125.732141457:7f06ec8f0780: IF
9125.732143181:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732149209:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732187452:7f06ec8f0780: AND
9125.732190494:7f06ec8f0780: var '$msg'
9125.732196137:7f06ec8f0780: CONTAINS
9125.732200404:7f06ec8f0780: string '[ag_auth]'
9125.732207517:7f06ec8f0780: THEN
9125.732209247:7f06ec8f0780: ACTION 0xb07330
[builtin:omfile::omfile:$auth]
9125.732212529:7f06ec8f0780: END IF
9125.732214307:7f06ec8f0780: IF
9125.732216028:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732222066:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732260692:7f06ec8f0780: AND
9125.732263818:7f06ec8f0780: var '$msg'
9125.732269523:7f06ec8f0780: CONTAINS
9125.732273854:7f06ec8f0780: string '[ag_scheduler]'
9125.732281013:7f06ec8f0780: THEN
9125.732282728:7f06ec8f0780: ACTION 0xb07ca0
[builtin:omfile::omfile:$scheduler]
9125.732286000:7f06ec8f0780: END IF
9125.732287723:7f06ec8f0780: IF
9125.732289428:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732295302:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732334038:7f06ec8f0780: AND
9125.732337187:7f06ec8f0780: var '$msg'
9125.732342994:7f06ec8f0780: CONTAINS
9125.732347369:7f06ec8f0780: string '[ag_healthmonitor]'
9125.732354513:7f06ec8f0780: THEN
9125.732356206:7f06ec8f0780: ACTION 0xb08620
[builtin:omfile::omfile:$healthmonitor]
9125.732359413:7f06ec8f0780: END IF
9125.732361163:7f06ec8f0780: IF
9125.732362903:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732368901:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732407810:7f06ec8f0780: AND
9125.732410901:7f06ec8f0780: var '$msg'
9125.732416560:7f06ec8f0780: CONTAINS
9125.732420936:7f06ec8f0780: string '[ag_event_amqp]'
9125.732428131:7f06ec8f0780: THEN
9125.732429817:7f06ec8f0780: ACTION 0xb08f90
[builtin:omfile::omfile:$event_amqp]
9125.732433124:7f06ec8f0780: END IF
9125.732434832:7f06ec8f0780: IF
9125.732436531:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732442492:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732481049:7f06ec8f0780: AND
9125.732484162:7f06ec8f0780: var '$msg'
9125.732489803:7f06ec8f0780: CONTAINS
9125.732494183:7f06ec8f0780: string '[ag_event_correlator]'
9125.732501293:7f06ec8f0780: THEN
9125.732503040:7f06ec8f0780: ACTION 0xb09920
[builtin:omfile::omfile:$event_correlator]
9125.732506357:7f06ec8f0780: END IF
9125.732508110:7f06ec8f0780: IF
9125.732509774:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732515693:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732554418:7f06ec8f0780: AND
9125.732557547:7f06ec8f0780: var '$msg'
9125.732563177:7f06ec8f0780: CONTAINS
9125.732567570:7f06ec8f0780: string '[ag_event_snmp_receiver]'
9125.732574856:7f06ec8f0780: THEN
9125.732576598:7f06ec8f0780: ACTION 0xb0a2c0
[builtin:omfile::omfile:$event_snmp_receiver]
9125.732579870:7f06ec8f0780: END IF
9125.732581600:7f06ec8f0780: IF
9125.732583283:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732589311:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732630025:7f06ec8f0780: AND
9125.732633208:7f06ec8f0780: var '$msg'
9125.732638895:7f06ec8f0780: CONTAINS
9125.732643258:7f06ec8f0780: string '[ag_event_syslog_receiver]'
9125.732650585:7f06ec8f0780: THEN
9125.732652314:7f06ec8f0780: ACTION 0xb0ac60
[builtin:omfile::omfile:$event_syslog_receiver]
9125.732655579:7f06ec8f0780: END IF
9125.732657369:7f06ec8f0780: IF
9125.732659103:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732665111:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732704012:7f06ec8f0780: AND
9125.732707116:7f06ec8f0780: var '$msg'
9125.732712824:7f06ec8f0780: CONTAINS
9125.732717211:7f06ec8f0780: string '[ag_event_manager]'
9125.732724401:7f06ec8f0780: THEN
9125.732726123:7f06ec8f0780: ACTION 0xb0b5e0
[builtin:omfile::omfile:$event_manager]
9125.732729524:7f06ec8f0780: END IF
9125.732731254:7f06ec8f0780: IF
9125.732732949:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732738982:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732777563:7f06ec8f0780: AND
9125.732780636:7f06ec8f0780: var '$msg'
9125.732786398:7f06ec8f0780: CONTAINS
9125.732790800:7f06ec8f0780: string '[ag_event_logger]'
9125.732797937:7f06ec8f0780: THEN
9125.732799696:7f06ec8f0780: ACTION 0xb0bf60
[builtin:omfile::omfile:$event_logger]
9125.732803047:7f06ec8f0780: END IF
9125.732804767:7f06ec8f0780: IF
9125.732806439:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732812405:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732851033:7f06ec8f0780: AND
9125.732854226:7f06ec8f0780: var '$msg'
9125.732859951:7f06ec8f0780: CONTAINS
9125.732864307:7f06ec8f0780: string '[ag_alarm_logger]'
9125.732871502:7f06ec8f0780: THEN
9125.732873216:7f06ec8f0780: ACTION 0xb0c8e0
[builtin:omfile::omfile:$alarm_logger]
9125.732876554:7f06ec8f0780: END IF
9125.732878266:7f06ec8f0780: IF
9125.732879980:7f06ec8f0780: function 'prifilt' (id:10, params:0)
9125.732886017:7f06ec8f0780: pmask: X X X X X X X X X X X
X X X X X X X FF X X X X X X
9125.732924422:7f06ec8f0780: AND
9125.732927539:7f06ec8f0780: var '$msg'
9125.732933178:7f06ec8f0780: CONTAINS
9125.732937511:7f06ec8f0780: string '[ag_device_configuration]'
9125.732944730:7f06ec8f0780: THEN
9125.732946409:7f06ec8f0780: ACTION 0xb0d280
[builtin:omfile::omfile:$device_configuration]
9125.732949710:7f06ec8f0780: END IF
9125.732951558:7f06ec8f0780: ruleset 0xaec840: ruleset
RSYSLOG_DefaultRuleset assigned parser list:
9125.732953490:7f06ec8f0780: End of Rulesets.
9125.732955186:7f06ec8f0780:
9125.732957324:7f06ec8f0780: Template: Name='RSYSLOG_DebugFormat'
9125.732960575:7f06ec8f0780: Entry(aef2f0): type 1, (CONSTANT), value:
'Debug line with all properties:
FROMHOST: ''
9125.732965263:7f06ec8f0780: Entry(aef3a0): type 2, (FIELD), value: '7'
9125.732970001:7f06ec8f0780: Entry(aef520): type 1, (CONSTANT), value: '',
fromhost-ip: ''
9125.732974526:7f06ec8f0780: Entry(aef5d0): type 2, (FIELD), value: '8'
9125.732979020:7f06ec8f0780: Entry(aef730): type 1, (CONSTANT), value: '',
HOSTNAME: ''
9125.732983548:7f06ec8f0780: Entry(aef7e0): type 2, (FIELD), value: '3'
9125.732988041:7f06ec8f0780: Entry(aef940): type 1, (CONSTANT), value: '',
PRI: '
9125.732992488:7f06ec8f0780: Entry(aef9f0): type 2, (FIELD), value: '9'
9125.732996891:7f06ec8f0780: Entry(aefb50): type 1, (CONSTANT), value: ',
syslogtag ''
9125.733001345:7f06ec8f0780: Entry(aefc00): type 2, (FIELD), value: '4'
9125.733005861:7f06ec8f0780: Entry(aefd60): type 1, (CONSTANT), value: '',
programname: ''
9125.733010274:7f06ec8f0780: Entry(aefe10): type 2, (FIELD), value: '17'
9125.733014857:7f06ec8f0780: Entry(aeff70): type 1, (CONSTANT), value: '',
APP-NAME: ''
9125.733019412:7f06ec8f0780: Entry(af0020): type 2, (FIELD), value: '20'
9125.733026348:7f06ec8f0780: Entry(af0180): type 1, (CONSTANT), value: '',
PROCID: ''
9125.733031092:7f06ec8f0780: Entry(af0230): type 2, (FIELD), value: '21'
9125.733035538:7f06ec8f0780: Entry(af0390): type 1, (CONSTANT), value: '',
MSGID: ''
9125.733039985:7f06ec8f0780: Entry(af0440): type 2, (FIELD), value: '22'
9125.733044447:7f06ec8f0780: Entry(af05a0): type 1, (CONSTANT), value: '',
TIMESTAMP: ''
9125.733048941:7f06ec8f0780: Entry(af0650): type 2, (FIELD), value: '2'
9125.733053485:7f06ec8f0780: Entry(af07b0): type 1, (CONSTANT), value: '',
STRUCTURED-DATA: ''
9125.733058038:7f06ec8f0780: Entry(af0860): type 2, (FIELD), value: '19'
9125.733062436:7f06ec8f0780: Entry(af09c0): type 1, (CONSTANT), value: '',
msg: ''
9125.733066898:7f06ec8f0780: Entry(af0a70): type 2, (FIELD), value: '1'
9125.733071353:7f06ec8f0780: Entry(af0bd0): type 1, (CONSTANT), value: ''
escaped msg: ''
9125.733075787:7f06ec8f0780: Entry(af0c80): type 2, (FIELD), value: '1'
[drop control-characters] [COMPLEX]
9125.733083084:7f06ec8f0780: Entry(af0de0): type 1, (CONSTANT), value: ''
inputname: '
9125.733087581:7f06ec8f0780: Entry(af0e90): type 2, (FIELD), value: '6'
9125.733092066:7f06ec8f0780: Entry(af0ff0): type 1, (CONSTANT), value: '
rawmsg: ''
9125.733096593:7f06ec8f0780: Entry(af10a0): type 2, (FIELD), value: '5'
9125.733100996:7f06ec8f0780: Entry(af1200): type 1, (CONSTANT), value: ''
'
9125.733105484:7f06ec8f0780: Template:
Name='RSYSLOG_SyslogProtocol23Format'
9125.733108536:7f06ec8f0780: Entry(af13c0): type 1, (CONSTANT), value: '<'
9125.733112841:7f06ec8f0780: Entry(af1470): type 2, (FIELD), value: '9'
9125.733117191:7f06ec8f0780: Entry(af15d0): type 1, (CONSTANT), value: '>1
'
9125.733121489:7f06ec8f0780: Entry(af1680): type 2, (FIELD), value: '2'
[Format as RFC3339-Date] [COMPLEX]
9125.733128657:7f06ec8f0780: Entry(af17e0): type 1, (CONSTANT), value: ' '
9125.733133043:7f06ec8f0780: Entry(af1890): type 2, (FIELD), value: '3'
9125.733137450:7f06ec8f0780: Entry(af19f0): type 1, (CONSTANT), value: ' '
9125.733141810:7f06ec8f0780: Entry(af1aa0): type 2, (FIELD), value: '20'
9125.733146228:7f06ec8f0780: Entry(af1c00): type 1, (CONSTANT), value: ' '
9125.733150629:7f06ec8f0780: Entry(af1cb0): type 2, (FIELD), value: '21'
9125.733155044:7f06ec8f0780: Entry(af1e10): type 1, (CONSTANT), value: ' '
9125.733159528:7f06ec8f0780: Entry(af1ec0): type 2, (FIELD), value: '22'
9125.733163929:7f06ec8f0780: Entry(af2020): type 1, (CONSTANT), value: ' '
9125.733168432:7f06ec8f0780: Entry(af20d0): type 2, (FIELD), value: '19'
9125.733172882:7f06ec8f0780: Entry(af2230): type 1, (CONSTANT), value: ' '
9125.733177403:7f06ec8f0780: Entry(af22e0): type 2, (FIELD), value: '1'
9125.733181830:7f06ec8f0780: Entry(af2440): type 1, (CONSTANT), value: '
'
9125.733186281:7f06ec8f0780: Template: Name='RSYSLOG_FileFormat'
9125.733189334:7f06ec8f0780: Template: Name='RSYSLOG_TraditionalFileFormat'
9125.733192334:7f06ec8f0780: Template: Name=' WallFmt'
9125.733195321:7f06ec8f0780: Entry(af26c0): type 1, (CONSTANT), value: '
Message from syslogd@'
9125.733199778:7f06ec8f0780: Entry(af2770): type 2, (FIELD), value: '3'
9125.733204248:7f06ec8f0780: Entry(af28f0): type 1, (CONSTANT), value: '
at '
9125.733208694:7f06ec8f0780: Entry(af29a0): type 2, (FIELD), value: '16'
9125.733213185:7f06ec8f0780: Entry(af2b00): type 1, (CONSTANT), value: '
...
'
9125.733217655:7f06ec8f0780: Entry(af2bb0): type 2, (FIELD), value: '4'
9125.733222109:7f06ec8f0780: Entry(af2d10): type 2, (FIELD), value: '1'
9125.733226528:7f06ec8f0780: Entry(af2de0): type 1, (CONSTANT), value: '
'
9125.733230923:7f06ec8f0780: Template: Name='RSYSLOG_ForwardFormat'
9125.733234015:7f06ec8f0780: Template:
Name='RSYSLOG_TraditionalForwardFormat'
9125.733237133:7f06ec8f0780: Template: Name=' StdUsrMsgFmt'
9125.733240261:7f06ec8f0780: Entry(af3060): type 1, (CONSTANT), value: ' '
9125.733244636:7f06ec8f0780: Entry(af3110): type 2, (FIELD), value: '4'
9125.733249085:7f06ec8f0780: Entry(af3290): type 2, (FIELD), value: '1'
9125.733253538:7f06ec8f0780: Entry(af3360): type 1, (CONSTANT), value: '
'
9125.733260353:7f06ec8f0780: Template: Name=' StdDBFmt' [SQL-Format
(MySQL)]
9125.733264980:7f06ec8f0780: Entry(af35f0): type 1, (CONSTANT), value:
'insert into SystemEvents (Message, Facility, FromHost, Priority,
DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (''
9125.733269616:7f06ec8f0780: Entry(af36a0): type 2, (FIELD), value: '1'
9125.733274165:7f06ec8f0780: Entry(af3820): type 1, (CONSTANT), value: '',
'
9125.733278587:7f06ec8f0780: Entry(af38d0): type 2, (FIELD), value: '12'
9125.733283066:7f06ec8f0780: Entry(af3a30): type 1, (CONSTANT), value: ',
''
9125.733287567:7f06ec8f0780: Entry(af3ae0): type 2, (FIELD), value: '3'
9125.733292054:7f06ec8f0780: Entry(af3c40): type 1, (CONSTANT), value: '',
'
9125.733296596:7f06ec8f0780: Entry(af3cf0): type 2, (FIELD), value: '14'
9125.733301077:7f06ec8f0780: Entry(af3e50): type 1, (CONSTANT), value: ',
''
9125.733305556:7f06ec8f0780: Entry(af3f00): type 2, (FIELD), value: '2'
[Format as MySQL-Date] [COMPLEX]
9125.733312824:7f06ec8f0780: Entry(af4060): type 1, (CONSTANT), value: '',
''
9125.733317337:7f06ec8f0780: Entry(af4110): type 2, (FIELD), value: '16'
[Format as MySQL-Date] [COMPLEX]
9125.733324355:7f06ec8f0780: Entry(af4270): type 1, (CONSTANT), value: '',
'
9125.733328858:7f06ec8f0780: Entry(af4320): type 2, (FIELD), value: '11'
9125.733333289:7f06ec8f0780: Entry(af4480): type 1, (CONSTANT), value: ',
''
9125.733337636:7f06ec8f0780: Entry(af4530): type 2, (FIELD), value: '4'
9125.733342053:7f06ec8f0780: Entry(af4690): type 1, (CONSTANT), value:
'')'
9125.733346464:7f06ec8f0780: Template: Name='RSYSLOG_SysklogdFileFormat'
9125.733349478:7f06ec8f0780: Entry(af47c0): type 2, (FIELD), value: '2'
9125.733353899:7f06ec8f0780: Entry(af4920): type 1, (CONSTANT), value: ' '
9125.733358332:7f06ec8f0780: Entry(af49d0): type 2, (FIELD), value: '3'
9125.733362752:7f06ec8f0780: Entry(af4b30): type 1, (CONSTANT), value: ' '
9125.733367265:7f06ec8f0780: Entry(af4be0): type 2, (FIELD), value: '4'
9125.733371736:7f06ec8f0780: Entry(af4d40): type 2, (FIELD), value: '1'
[SP iff no first SP] [COMPLEX]
9125.733378979:7f06ec8f0780: Entry(af4e10): type 2, (FIELD), value: '1'
9125.733383446:7f06ec8f0780: Entry(af4ee0): type 1, (CONSTANT), value: '
'
9125.733387991:7f06ec8f0780: Template: Name=' StdPgSQLFmt' [SQL-Format
(standard SQL)]
9125.733392406:7f06ec8f0780: Entry(af5170): type 1, (CONSTANT), value:
'insert into SystemEvents (Message, Facility, FromHost, Priority,
DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (''
9125.733397050:7f06ec8f0780: Entry(af5220): type 2, (FIELD), value: '1'
9125.733401438:7f06ec8f0780: Entry(af53a0): type 1, (CONSTANT), value: '',
'
9125.733405798:7f06ec8f0780: Entry(af5450): type 2, (FIELD), value: '12'
9125.733410287:7f06ec8f0780: Entry(af55b0): type 1, (CONSTANT), value: ',
''
9125.733414680:7f06ec8f0780: Entry(af5660): type 2, (FIELD), value: '3'
9125.733419111:7f06ec8f0780: Entry(af57c0): type 1, (CONSTANT), value: '',
'
9125.733423477:7f06ec8f0780: Entry(af5870): type 2, (FIELD), value: '14'
9125.733427968:7f06ec8f0780: Entry(af59d0): type 1, (CONSTANT), value: ',
''
9125.733432381:7f06ec8f0780: Entry(af5a80): type 2, (FIELD), value: '2'
[Format as PgSQL-Date] [COMPLEX]
9125.733439587:7f06ec8f0780: Entry(af5be0): type 1, (CONSTANT), value: '',
''
9125.733444033:7f06ec8f0780: Entry(af5c90): type 2, (FIELD), value: '16'
[Format as PgSQL-Date] [COMPLEX]
9125.733451212:7f06ec8f0780: Entry(af5df0): type 1, (CONSTANT), value: '',
'
9125.733455708:7f06ec8f0780: Entry(af5ea0): type 2, (FIELD), value: '11'
9125.733460077:7f06ec8f0780: Entry(af6000): type 1, (CONSTANT), value: ',
''
9125.733464585:7f06ec8f0780: Entry(af60b0): type 2, (FIELD), value: '4'
9125.733468984:7f06ec8f0780: Entry(af6210): type 1, (CONSTANT), value:
'')'
9125.733473441:7f06ec8f0780: Template: Name=' StdJSONFmt'
9125.733476510:7f06ec8f0780: Entry(af63a0): type 1, (CONSTANT), value:
'{"message":"'
9125.733481043:7f06ec8f0780: Entry(af6450): type 2, (FIELD), value: '1'
[format as JSON] [COMPLEX]
9125.733490646:7f06ec8f0780: Entry(af65d0): type 1, (CONSTANT), value:
'","fromhost":"'
9125.733495311:7f06ec8f0780: Entry(af6680): type 2, (FIELD), value: '3'
[format as JSON] [COMPLEX]
9125.733502644:7f06ec8f0780: Entry(af67e0): type 1, (CONSTANT), value:
'","facility":"'
9125.733507146:7f06ec8f0780: Entry(af6890): type 2, (FIELD), value: '13'
9125.733511767:7f06ec8f0780: Entry(af69f0): type 1, (CONSTANT), value:
'","priority":"'
9125.733516305:7f06ec8f0780: Entry(af6aa0): type 2, (FIELD), value: '15'
9125.733520740:7f06ec8f0780: Entry(af6c00): type 1, (CONSTANT), value:
'","timereported":"'
9125.733525297:7f06ec8f0780: Entry(af6cb0): type 2, (FIELD), value: '2'
[Format as RFC3339-Date] [COMPLEX]
9125.733532451:7f06ec8f0780: Entry(af6e10): type 1, (CONSTANT), value:
'","timegenerated":"'
9125.733536972:7f06ec8f0780: Entry(af6ec0): type 2, (FIELD), value: '16'
[Format as RFC3339-Date] [COMPLEX]
9125.733544168:7f06ec8f0780: Entry(af7020): type 1, (CONSTANT), value:
'"}'
9125.733548602:7f06ec8f0780: Template:
Name='RSYSLOG_omudpspoofDfltSourceTpl'
9125.733551647:7f06ec8f0780: Entry(af7150): type 2, (FIELD), value: '8'
9125.733556192:7f06ec8f0780: Main queue size 10000 messages.
9125.733558278:7f06ec8f0780: Main queue worker threads: 1, wThread
shutdown: 60000, Perists every 0 updates.
9125.733560364:7f06ec8f0780: Main queue timeouts: shutdown: 1500, action
completion shutdown: 1000, enq: 2000
9125.733562356:7f06ec8f0780: Main queue watermarks: high: 8000, low: 2000,
discard: 9800, discard-severity: 8
9125.733564308:7f06ec8f0780: Main queue save on shutdown 1, max disk space
allowed 0
9125.733566213:7f06ec8f0780: Work Directory: '/var/spool/rsyslog'.
9125.733568089:7f06ec8f0780: Outchannel: Name='root'
9125.733569925:7f06ec8f0780: File Template: '/var/log/agalaxy/agalaxy.log'
9125.733571720:7f06ec8f0780: Max Size.....: 50000000
9125.733573531:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/agalaxy.log 10'
9125.733575299:7f06ec8f0780: Outchannel: Name='inventory'
9125.733577021:7f06ec8f0780: File Template:
'/var/log/agalaxy/inventory.log'
9125.733578751:7f06ec8f0780: Max Size.....: 10000000
9125.733580579:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/inventory.log 10'
9125.733582311:7f06ec8f0780: Outchannel: Name='slb'
9125.733584120:7f06ec8f0780: File Template: '/var/log/agalaxy/slb.log'
9125.733585960:7f06ec8f0780: Max Size.....: 10000000
9125.733587723:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/slb.log 10'
9125.733589497:7f06ec8f0780: Outchannel: Name='auth'
9125.733591215:7f06ec8f0780: File Template: '/var/log/agalaxy/auth.log'
9125.733592986:7f06ec8f0780: Max Size.....: 10000000
9125.733594751:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/auth.log 10'
9125.733596486:7f06ec8f0780: Outchannel: Name='scheduler'
9125.733598260:7f06ec8f0780: File Template:
'/var/log/agalaxy/scheduler.log'
9125.733600038:7f06ec8f0780: Max Size.....: 10000000
9125.733601846:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/scheduler.log 10'
9125.733603620:7f06ec8f0780: Outchannel: Name='healthmonitor'
9125.733605410:7f06ec8f0780: File Template:
'/var/log/agalaxy/healthmonitor.log'
9125.733607187:7f06ec8f0780: Max Size.....: 10000000
9125.733608969:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/healthmonitor.log 10'
9125.733610672:7f06ec8f0780: Outchannel: Name='event_amqp'
9125.733612401:7f06ec8f0780: File Template:
'/var/log/agalaxy/event_amqp.log'
9125.733614202:7f06ec8f0780: Max Size.....: 10000000
9125.733615987:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/event_amqp.log 10'
9125.733617773:7f06ec8f0780: Outchannel: Name='event_correlator'
9125.733619566:7f06ec8f0780: File Template:
'/var/log/agalaxy/event_correlator.log'
9125.733621395:7f06ec8f0780: Max Size.....: 10000000
9125.733623215:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/event_correlator.log 10'
9125.733627233:7f06ec8f0780: Outchannel: Name='event_snmp_receiver'
9125.733629193:7f06ec8f0780: File Template:
'/var/log/agalaxy/event_snmp_receiver.log'
9125.733631041:7f06ec8f0780: Max Size.....: 10000000
9125.733632903:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/event_snmp_receiver.log 10'
9125.733634670:7f06ec8f0780: Outchannel: Name='event_syslog_receiver'
9125.733636484:7f06ec8f0780: File Template:
'/var/log/agalaxy/event_syslog_receiver.log'
9125.733638236:7f06ec8f0780: Max Size.....: 10000000
9125.733640093:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/event_syslog_receiver.log 10'
9125.733641848:7f06ec8f0780: Outchannel: Name='event_manager'
9125.733643561:7f06ec8f0780: File Template:
'/var/log/agalaxy/event_manager.log'
9125.733645379:7f06ec8f0780: Max Size.....: 10000000
9125.733647182:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/event_manager.log 10'
9125.733648908:7f06ec8f0780: Outchannel: Name='event_logger'
9125.733650695:7f06ec8f0780: File Template:
'/var/log/agalaxy/event_logger.log'
9125.733652506:7f06ec8f0780: Max Size.....: 10000000
9125.733654305:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/event_logger.log 10'
9125.733655991:7f06ec8f0780: Outchannel: Name='alarm_logger'
9125.733657739:7f06ec8f0780: File Template:
'/var/log/agalaxy/alarm_logger.log'
9125.733659474:7f06ec8f0780: Max Size.....: 10000000
9125.733661246:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/alarm_logger.log 10'
9125.733662967:7f06ec8f0780: Outchannel: Name='device_configuration'
9125.733664691:7f06ec8f0780: File Template:
'/var/log/agalaxy/device_configuration.log'
9125.733666383:7f06ec8f0780: Max Size.....: 10000000
9125.733668160:7f06ec8f0780: OnSizeLimtCmd: '/usr/local/bin/logrot.py
/var/log/agalaxy/device_configuration.log 10'
9125.733669915:7f06ec8f0780: Modules used in this configuration:
9125.733671711:7f06ec8f0780: builtin:omfile
9125.733673506:7f06ec8f0780: builtin:ompipe
9125.733675243:7f06ec8f0780: builtin-shell
9125.733676961:7f06ec8f0780: builtin:omdiscard
9125.733678764:7f06ec8f0780: builtin:omfwd
9125.733680506:7f06ec8f0780: builtin:omusrmsg
9125.733682175:7f06ec8f0780: builtin:pmrfc5424
9125.733683832:7f06ec8f0780: builtin:pmrfc3164
9125.733685550:7f06ec8f0780: builtin:smfile
9125.733687268:7f06ec8f0780: builtin:smtradfile
9125.733688942:7f06ec8f0780: builtin:smfwd
9125.733690598:7f06ec8f0780: builtin:smtradfwd
9125.733692331:7f06ec8f0780: imuxsock
9125.733694087:7f06ec8f0780: imklog
9125.733723679:7f06ec8f0780: GenerateLocalHostName uses 'balar-lnx'
9125.733730485:7f06ec8f0780: Checking pidfile '/var/run/rsyslogd.pid'.
More information about the rsyslog-notify
mailing list