[rsyslog-notify] Forum Thread: Re: Action following matched regular expression not performe - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Wed Mar 11 12:59:36 CET 2015


User: mountfa 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25314#p25314

Message: 
----------
Hi dlang,
Thanks for the input, the default behaviour for the omudpspoof module
though is to spoof the original source IP so that should not be the issue
here.

Indeed I have since found the issue in that the regular expression was not
matching when it should due to the search string not being present in the
:msg contents.
I modified :msg to :rawmsg and the expression now matches and the
forwarding action is now executed correctly.
I now just have to research why the search string was not in :msg when it
should have been, but that is a whole different topic.

Mods : Please feel free to close and delete this post since the subject has
turned out to be in-accurate. (would have done so myself but apparently
cant once a reply has been received).


More information about the rsyslog-notify mailing list