[rsyslog-notify] Forum Thread: Re: rsyslog error ! - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Mon May 18 03:01:52 CEST 2015
User: lee62817
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25617#p25617
Message:
----------
my rsyslog stop at 2015/05/15 23:16
loganalyzer can not receive log
[img:3n7wmepi]http://i881.photobucket.com/albums/ac12/vertexgrp/error_zpsah8jfqpe.jpg[/img:3n7wmepi]
but my rsyslog still running
[root at localhost ~]# service rsyslog status
rsyslog.service - System Logging Service
Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled)
Active: active (running) since ??2015-05-14 14:55:26 CST; 3 days ago
Main PID: 853 (rsyslogd)
CGroup: /system.slice/rsyslog.service
?颪?853 /sbin/rsyslogd -n
5??14 14:55:23 localhost.localdomain systemd[1]: Starting System Logging
Service...
5??14 14:55:26 localhost.localdomain systemd[1]: Started System Logging
Service.
[root at localhost ~]#
i use rsyslogd -dn to debug and got debug log
0575.550404161:7f195916f780: ACTION 0x7f195a5f2560
[builtin:omusrmsg::omusrmsg:*]
0575.550412858:7f195916f780: END PRIFILT
0575.550417635:7f195916f780: PRIFILT 'uucp,news.crit'
0575.550422308:7f195916f780: pmask: X X X X X X X 7 7 X X X X
X X X X X X X X X X X X X
0575.550472168:7f195916f780: ACTION 0x7f195a5f2f90
[builtin:omfile:/var/log/spooler]
0575.550477202:7f195916f780: END PRIFILT
0575.550490084:7f195916f780: PRIFILT 'local7.*'
0575.550493137:7f195916f780: pmask: X X X X X X X X X X X X X
X X X X X X X X X X FF X X
0575.550537693:7f195916f780: ACTION 0x7f195a5f39e0
[builtin:omfile:/var/log/boot.log]
0575.550542559:7f195916f780: END PRIFILT
0575.550545805:7f195916f780: ACTION 0x7f195a5f83a0
[builtin:omfwd:@10.3.7.2]
0575.550549144:7f195916f780: ruleset 0x7f195a5c99c0: ruleset
RSYSLOG_DefaultRuleset assigned parser list:
0575.550552745:7f195916f780: End of Rulesets.
0575.550555408:7f195916f780:
0575.550558844:7f195916f780: Template: Name='RSYSLOG_DebugFormat'
0575.550604238:7f195916f780: Entry(7f195a5cc490): type 1, (CONSTANT),
value: 'Debug line with all properties:
FROMHOST: ''
0575.550613748:7f195916f780: Entry(7f195a5cc550): type 2, (FIELD),
value: '7'
0575.550638628:7f195916f780: Entry(7f195a5cc6c0): type 1, (CONSTANT),
value: '', fromhost-ip: ''
0575.550645450:7f195916f780: Entry(7f195a5cc780): type 2, (FIELD),
value: '8'
0575.550651664:7f195916f780: Entry(7f195a5cc8f0): type 1, (CONSTANT),
value: '', HOSTNAME: ''
0575.550657971:7f195916f780: Entry(7f195a5cc9b0): type 2, (FIELD),
value: '3'
0575.550664183:7f195916f780: Entry(7f195a5ccb20): type 1, (CONSTANT),
value: '', PRI: '
0575.550670485:7f195916f780: Entry(7f195a5ccbe0): type 2, (FIELD),
value: '9'
0575.550676704:7f195916f780: Entry(7f195a5ccd50): type 1, (CONSTANT),
value: ',
syslogtag ''
0575.550682844:7f195916f780: Entry(7f195a5cce10): type 2, (FIELD),
value: '4'
0575.550689056:7f195916f780: Entry(7f195a5ccf80): type 1, (CONSTANT),
value: '', programname: ''
0575.550695295:7f195916f780: Entry(7f195a5cd040): type 2, (FIELD),
value: '17'
0575.550701592:7f195916f780: Entry(7f195a5cd1b0): type 1, (CONSTANT),
value: '', APP-NAME: ''
0575.550707991:7f195916f780: Entry(7f195a5cd270): type 2, (FIELD),
value: '20'
0575.550714313:7f195916f780: Entry(7f195a5cd3e0): type 1, (CONSTANT),
value: '', PROCID: ''
0575.550720462:7f195916f780: Entry(7f195a5cd4a0): type 2, (FIELD),
value: '21'
0575.550726437:7f195916f780: Entry(7f195a5cd610): type 1, (CONSTANT),
value: '', MSGID: ''
0575.550732649:7f195916f780: Entry(7f195a5cd6d0): type 2, (FIELD),
value: '22'
0575.550738700:7f195916f780: Entry(7f195a5cd840): type 1, (CONSTANT),
value: '',
TIMESTAMP: ''
0575.550744827:7f195916f780: Entry(7f195a5cd900): type 2, (FIELD),
value: '2'
0575.550750789:7f195916f780: Entry(7f195a5cda70): type 1, (CONSTANT),
value: '', STRUCTURED-DATA: ''
0575.550756978:7f195916f780: Entry(7f195a5cdb30): type 2, (FIELD),
value: '19'
0575.550762978:7f195916f780: Entry(7f195a5cdca0): type 1, (CONSTANT),
value: '',
msg: ''
0575.550769179:7f195916f780: Entry(7f195a5cdd60): type 2, (FIELD),
value: '1'
0575.550775201:7f195916f780: Entry(7f195a5cded0): type 1, (CONSTANT),
value: ''
escaped msg: ''
0575.550781270:7f195916f780: Entry(7f195a5cdf90): type 2, (FIELD),
value: '1' [drop control-characters] [COMPLEX]
0575.550791098:7f195916f780: Entry(7f195a5ce100): type 1, (CONSTANT),
value: ''
inputname: '
0575.550797265:7f195916f780: Entry(7f195a5ce1c0): type 2, (FIELD),
value: '6'
0575.550803375:7f195916f780: Entry(7f195a5ce330): type 1, (CONSTANT),
value: ' rawmsg: ''
0575.550809534:7f195916f780: Entry(7f195a5ce3f0): type 2, (FIELD),
value: '5'
0575.550815526:7f195916f780: Entry(7f195a5ce560): type 1, (CONSTANT),
value: ''
$!:'
0575.550821447:7f195916f780: Entry(7f195a5ce620): type 2, (FIELD),
value: '200' [EE-Property: '!']
0575.550829502:7f195916f780: Entry(7f195a5ce7b0): type 1, (CONSTANT),
value: '
$.:'
0575.550835787:7f195916f780: Entry(7f195a5ce870): type 2, (FIELD),
value: '202' [Local Var: '!']
0575.550843694:7f195916f780: Entry(7f195a5cea00): type 1, (CONSTANT),
value: '
$/:'
0575.550849648:7f195916f780: Entry(7f195a5ceac0): type 2, (FIELD),
value: '203'
0575.550855583:7f195916f780: Entry(7f195a5cec50): type 1, (CONSTANT),
value: '
'
0575.550861619:7f195916f780: Template:
Name='RSYSLOG_SyslogProtocol23Format'
0575.550865993:7f195916f780: Entry(7f195a5cee40): type 1, (CONSTANT),
value: '<'
0575.550880973:7f195916f780: Entry(7f195a5cef00): type 2, (FIELD),
value: '9'
0575.550887897:7f195916f780: Entry(7f195a5cf070): type 1, (CONSTANT),
value: '>1 '
0575.550894389:7f195916f780: Entry(7f195a5cf130): type 2, (FIELD),
value: '2' [Format as RFC3339-Date] [COMPLEX]
0575.550904277:7f195916f780: Entry(7f195a5cf2a0): type 1, (CONSTANT),
value: ' '
0575.550910426:7f195916f780: Entry(7f195a5cf360): type 2, (FIELD),
value: '3'
0575.550916628:7f195916f780: Entry(7f195a5cf4d0): type 1, (CONSTANT),
value: ' '
0575.550922553:7f195916f780: Entry(7f195a5cf590): type 2, (FIELD),
value: '20'
0575.550928699:7f195916f780: Entry(7f195a5cf700): type 1, (CONSTANT),
value: ' '
0575.550934764:7f195916f780: Entry(7f195a5cf7c0): type 2, (FIELD),
value: '21'
0575.550940768:7f195916f780: Entry(7f195a5cf930): type 1, (CONSTANT),
value: ' '
0575.550946645:7f195916f780: Entry(7f195a5cf9f0): type 2, (FIELD),
value: '22'
0575.550952512:7f195916f780: Entry(7f195a5cfb60): type 1, (CONSTANT),
value: ' '
0575.550958398:7f195916f780: Entry(7f195a5cfc20): type 2, (FIELD),
value: '19'
0575.550964408:7f195916f780: Entry(7f195a5cfd90): type 1, (CONSTANT),
value: ' '
0575.550970447:7f195916f780: Entry(7f195a5cfe50): type 2, (FIELD),
value: '1'
0575.550976364:7f195916f780: Entry(7f195a5cffc0): type 1, (CONSTANT),
value: '
'
0575.550982293:7f195916f780: Template: Name='RSYSLOG_FileFormat'
0575.550986452:7f195916f780: Template: Name='RSYSLOG_TraditionalFileFormat'
0575.550990653:7f195916f780: Template: Name=' WallFmt'
0575.550995064:7f195916f780: Entry(7f195a5d02d0): type 1, (CONSTANT),
value: '
Message from syslogd@'
0575.551001279:7f195916f780: Entry(7f195a5d0390): type 2, (FIELD),
value: '3'
0575.551007355:7f195916f780: Entry(7f195a5d0500): type 1, (CONSTANT),
value: ' at '
0575.551014883:7f195916f780: Entry(7f195a5d05c0): type 2, (FIELD),
value: '16'
0575.551025526:7f195916f780: Entry(7f195a5d0730): type 1, (CONSTANT),
value: ' ...
'
0575.551036019:7f195916f780: Entry(7f195a5d07f0): type 2, (FIELD),
value: '4'
0575.551047460:7f195916f780: Entry(7f195a5d0960): type 2, (FIELD),
value: '1'
0575.551055647:7f195916f780: Entry(7f195a5d0a40): type 1, (CONSTANT),
value: '
'
0575.551061869:7f195916f780: Template: Name='RSYSLOG_ForwardFormat'
0575.551066205:7f195916f780: Template:
Name='RSYSLOG_TraditionalForwardFormat'
0575.551070424:7f195916f780: Template: Name=' StdUsrMsgFmt'
0575.551074730:7f195916f780: Entry(7f195a5d0d50): type 1, (CONSTANT),
value: ' '
0575.551080852:7f195916f780: Entry(7f195a5d0e10): type 2, (FIELD),
value: '4'
0575.551086974:7f195916f780: Entry(7f195a5d0f80): type 2, (FIELD),
value: '1'
0575.551093071:7f195916f780: Entry(7f195a5d1060): type 1, (CONSTANT),
value: '
'
0575.551099033:7f195916f780: Template: Name=' StdDBFmt' [SQL-Format
(MySQL)]
0575.551105152:7f195916f780: Entry(7f195a5d1340): type 1, (CONSTANT),
value: 'insert into SystemEvents (Message, Facility, FromHost, Priority,
DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (''
0575.551111822:7f195916f780: Entry(7f195a5d1400): type 2, (FIELD),
value: '1'
0575.551118113:7f195916f780: Entry(7f195a5d1570): type 1, (CONSTANT),
value: '', '
0575.551129299:7f195916f780: Entry(7f195a5d1630): type 2, (FIELD),
value: '12'
0575.551140853:7f195916f780: Entry(7f195a5d17a0): type 1, (CONSTANT),
value: ', ''
0575.551149353:7f195916f780: Entry(7f195a5d1860): type 2, (FIELD),
value: '3'
0575.551155712:7f195916f780: Entry(7f195a5d19d0): type 1, (CONSTANT),
value: '', '
0575.551161824:7f195916f780: Entry(7f195a5d1a90): type 2, (FIELD),
value: '14'
0575.551195511:7f195916f780: Entry(7f195a5d1c00): type 1, (CONSTANT),
value: ', ''
0575.551209823:7f195916f780: Entry(7f195a5d1cc0): type 2, (FIELD),
value: '2' [Format as MySQL-Date] [COMPLEX]
0575.551220021:7f195916f780: Entry(7f195a5d1e30): type 1, (CONSTANT),
value: '', ''
0575.551226716:7f195916f780: Entry(7f195a5d1ef0): type 2, (FIELD),
value: '16' [Format as MySQL-Date] [COMPLEX]
0575.551290970:7f195916f780: Entry(7f195a5d2060): type 1, (CONSTANT),
value: '', '
0575.551350408:7f195916f780: Entry(7f195a5d2120): type 2, (FIELD),
value: '11'
0575.551398429:7f195916f780: Entry(7f195a5d2290): type 1, (CONSTANT),
value: ', ''
0575.551408873:7f195916f780: Entry(7f195a5d2350): type 2, (FIELD),
value: '4'
0575.551419268:7f195916f780: Entry(7f195a5d24c0): type 1, (CONSTANT),
value: '')'
0575.551430261:7f195916f780: Template: Name='RSYSLOG_SysklogdFileFormat'
0575.551438709:7f195916f780: Entry(7f195a5d2620): type 2, (FIELD),
value: '2'
0575.551449627:7f195916f780: Entry(7f195a5d2790): type 1, (CONSTANT),
value: ' '
0575.551459548:7f195916f780: Entry(7f195a5d2850): type 2, (FIELD),
value: '3'
0575.551510453:7f195916f780: Entry(7f195a5d29c0): type 1, (CONSTANT),
value: ' '
0575.551525955:7f195916f780: Entry(7f195a5d2a80): type 2, (FIELD),
value: '4'
0575.551537286:7f195916f780: Entry(7f195a5d2bf0): type 2, (FIELD),
value: '1' [SP iff no first SP] [COMPLEX]
0575.551552761:7f195916f780: Entry(7f195a5d2cd0): type 2, (FIELD),
value: '1'
0575.551562471:7f195916f780: Entry(7f195a5d2db0): type 1, (CONSTANT),
value: '
'
0575.551572006:7f195916f780: Template: Name=' StdPgSQLFmt' [SQL-Format
(standard SQL)]
0575.551582204:7f195916f780: Entry(7f195a5d3090): type 1, (CONSTANT),
value: 'insert into SystemEvents (Message, Facility, FromHost, Priority,
DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (''
0575.551594538:7f195916f780: Entry(7f195a5d3150): type 2, (FIELD),
value: '1'
0575.551604256:7f195916f780: Entry(7f195a5d32c0): type 1, (CONSTANT),
value: '', '
0575.551627720:7f195916f780: Entry(7f195a5d3380): type 2, (FIELD),
value: '12'
0575.551637901:7f195916f780: Entry(7f195a5d34f0): type 1, (CONSTANT),
value: ', ''
0575.551649857:7f195916f780: Entry(7f195a5d35b0): type 2, (FIELD),
value: '3'
0575.551660843:7f195916f780: Entry(7f195a5d3720): type 1, (CONSTANT),
value: '', '
0575.551671761:7f195916f780: Entry(7f195a5d37e0): type 2, (FIELD),
value: '14'
0575.551683735:7f195916f780: Entry(7f195a5d3950): type 1, (CONSTANT),
value: ', ''
0575.551695168:7f195916f780: Entry(7f195a5d3a10): type 2, (FIELD),
value: '2' [Format as PgSQL-Date] [COMPLEX]
0575.551708484:7f195916f780: Entry(7f195a5d3b80): type 1, (CONSTANT),
value: '', ''
0575.551715061:7f195916f780: Entry(7f195a5d3c40): type 2, (FIELD),
value: '16' [Format as PgSQL-Date] [COMPLEX]
0575.551724977:7f195916f780: Entry(7f195a5d3db0): type 1, (CONSTANT),
value: '', '
0575.551731499:7f195916f780: Entry(7f195a5d3e70): type 2, (FIELD),
value: '11'
0575.551737803:7f195916f780: Entry(7f195a5d3fe0): type 1, (CONSTANT),
value: ', ''
0575.551744468:7f195916f780: Entry(7f195a5d40a0): type 2, (FIELD),
value: '4'
0575.551750832:7f195916f780: Entry(7f195a5d4210): type 1, (CONSTANT),
value: '')'
0575.551757031:7f195916f780: Template: Name=' StdJSONFmt'
0575.551761675:7f195916f780: Entry(7f195a5d43f0): type 1, (CONSTANT),
value: '{"message":"'
0575.551768000:7f195916f780: Entry(7f195a5d44b0): type 2, (FIELD),
value: '1' [format as JSON] [COMPLEX]
0575.551777808:7f195916f780: Entry(7f195a5d4620): type 1, (CONSTANT),
value: '","fromhost":"'
0575.551784077:7f195916f780: Entry(7f195a5d46e0): type 2, (FIELD),
value: '3' [format as JSON] [COMPLEX]
0575.551793675:7f195916f780: Entry(7f195a5d4850): type 1, (CONSTANT),
value: '","facility":"'
0575.551799997:7f195916f780: Entry(7f195a5d4910): type 2, (FIELD),
value: '13'
0575.551806226:7f195916f780: Entry(7f195a5d4a80): type 1, (CONSTANT),
value: '","priority":"'
0575.551812468:7f195916f780: Entry(7f195a5d4b40): type 2, (FIELD),
value: '15'
0575.551818660:7f195916f780: Entry(7f195a5d4cb0): type 1, (CONSTANT),
value: '","timereported":"'
0575.551825007:7f195916f780: Entry(7f195a5d4d70): type 2, (FIELD),
value: '2' [Format as RFC3339-Date] [COMPLEX]
0575.551834732:7f195916f780: Entry(7f195a5d4ee0): type 1, (CONSTANT),
value: '","timegenerated":"'
0575.551841089:7f195916f780: Entry(7f195a5d4fa0): type 2, (FIELD),
value: '16' [Format as RFC3339-Date] [COMPLEX]
0575.551850907:7f195916f780: Entry(7f195a5d5110): type 1, (CONSTANT),
value: '"}'
0575.551857221:7f195916f780: Template:
Name='RSYSLOG_omudpspoofDfltSourceTpl'
0575.551872228:7f195916f780: Entry(7f195a5d5270): type 2, (FIELD),
value: '8'
0575.551878885:7f195916f780: Template: Name='insertpl' [SQL-Format (MySQL)]
0575.551885355:7f195916f780: Entry(7f195a5d67c0): type 1, (CONSTANT),
value: 'insert into SystemEvents (Message, Facility, FromHost, FromIP,
Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (''
0575.551892214:7f195916f780: Entry(7f195a5d6880): type 2, (FIELD),
value: '1'
0575.551898411:7f195916f780: Entry(7f195a5d69d0): type 1, (CONSTANT),
value: '', '
0575.551904688:7f195916f780: Entry(7f195a5d6a90): type 2, (FIELD),
value: '12'
0575.551911150:7f195916f780: Entry(7f195a5d6c00): type 1, (CONSTANT),
value: ', ''
0575.551917509:7f195916f780: Entry(7f195a5d6cc0): type 2, (FIELD),
value: '3'
0575.551923834:7f195916f780: Entry(7f195a5d6e30): type 1, (CONSTANT),
value: '', ''
0575.551930128:7f195916f780: Entry(7f195a5d6ef0): type 2, (FIELD),
value: '8'
0575.551936460:7f195916f780: Entry(7f195a5d7060): type 1, (CONSTANT),
value: '', '
0575.551942622:7f195916f780: Entry(7f195a5d7120): type 2, (FIELD),
value: '14'
0575.551948894:7f195916f780: Entry(7f195a5d7290): type 1, (CONSTANT),
value: ', ''
0575.551955123:7f195916f780: Entry(7f195a5d7350): type 2, (FIELD),
value: '2' [Format as MySQL-Date] [COMPLEX]
0575.551964651:7f195916f780: Entry(7f195a5d74c0): type 1, (CONSTANT),
value: '', ''
0575.551970843:7f195916f780: Entry(7f195a5d7580): type 2, (FIELD),
value: '16' [Format as MySQL-Date] [COMPLEX]
0575.551980193:7f195916f780: Entry(7f195a5d76f0): type 1, (CONSTANT),
value: '', '
0575.551986332:7f195916f780: Entry(7f195a5d77b0): type 2, (FIELD),
value: '11'
0575.551992457:7f195916f780: Entry(7f195a5d7920): type 1, (CONSTANT),
value: ', ''
0575.551998611:7f195916f780: Entry(7f195a5d79e0): type 2, (FIELD),
value: '4'
0575.552004628:7f195916f780: Entry(7f195a5d7b50): type 1, (CONSTANT),
value: '')'
0575.552010752:7f195916f780: Template: Name='stdmsg'
0575.552015176:7f195916f780: Entry(7f195a5d7c10): type 2, (FIELD),
value: '2'
0575.552021255:7f195916f780: Entry(7f195a5d7d60): type 1, (CONSTANT),
value: ' '
0575.552027300:7f195916f780: Entry(7f195a5d7e20): type 2, (FIELD),
value: '3'
0575.552033264:7f195916f780: Entry(7f195a5d7f70): type 1, (CONSTANT),
value: ' '
0575.552039496:7f195916f780: Entry(7f195a5d8030): type 2, (FIELD),
value: '8'
0575.552045825:7f195916f780: Entry(7f195a5d81a0): type 1, (CONSTANT),
value: ' '
0575.552052142:7f195916f780: Entry(7f195a5d8260): type 2, (FIELD),
value: '4'
0575.552058491:7f195916f780: Entry(7f195a5d83d0): type 2, (FIELD),
value: '200' [EE-Property: '!msg'] [SP iff no first SP] [COMPLEX]
0575.552070017:7f195916f780: Entry(7f195a5d84d0): type 2, (FIELD),
value: '1'
0575.552076267:7f195916f780: Entry(7f195a5d85b0): type 1, (CONSTANT),
value: '
'
0575.552082784:7f195916f780: Template: Name='SpiceTmpl'
0575.552087532:7f195916f780: Entry(7f195a5ef060): type 2, (FIELD),
value: '2'
0575.552094024:7f195916f780: Entry(7f195a5ef1b0): type 1, (CONSTANT),
value: '.'
0575.552100431:7f195916f780: Entry(7f195a5ef270): type 2, (FIELD),
value: '2' [fractional seconds, only] [COMPLEX]
0575.552110349:7f195916f780: Entry(7f195a5ef3c0): type 1, (CONSTANT),
value: ' '
0575.552116551:7f195916f780: Entry(7f195a5ef480): type 2, (FIELD),
value: '4'
0575.552122663:7f195916f780: Entry(7f195a5ef5d0): type 1, (CONSTANT),
value: ' '
0575.552128772:7f195916f780: Entry(7f195a5ef690): type 2, (FIELD),
value: '15'
0575.552134859:7f195916f780: Entry(7f195a5ef7e0): type 1, (CONSTANT),
value: ':'
0575.552140956:7f195916f780: Entry(7f195a5ef8a0): type 2, (FIELD),
value: '1' [SP iff no first SP] [COMPLEX]
0575.552150424:7f195916f780: Entry(7f195a5ef960): type 2, (FIELD),
value: '1' [drop last LF in msg] [COMPLEX]
0575.552159797:7f195916f780: Entry(7f195a5efab0): type 1, (CONSTANT),
value: '
'
0575.552166894:7f195916f780: Main queue size 100000 messages.
0575.552214880:7f195916f780: Main queue worker threads: 2, wThread
shutdown: 60000, Perists every 0 updates.
0575.552229370:7f195916f780: Main queue timeouts: shutdown: 1500, action
completion shutdown: 1000, enq: 2000
0575.552233443:7f195916f780: Main queue watermarks: high: 80000, low:
20000, discard: 98000, discard-severity: 8
0575.552236629:7f195916f780: Main queue save on shutdown 1, max disk space
allowed 0
0575.552240055:7f195916f780: Work Directory: '/var/lib/rsyslog'.
0575.552243286:7f195916f780: Modules used in this configuration:
0575.552246587:7f195916f780: builtin:omfile
0575.552249696:7f195916f780: builtin:ompipe
0575.552252419:7f195916f780: builtin-shell
0575.552255237:7f195916f780: builtin:omdiscard
0575.552257973:7f195916f780: builtin:omfwd
0575.552260764:7f195916f780: builtin:omusrmsg
0575.552263552:7f195916f780: builtin:pmrfc5424
0575.552266238:7f195916f780: builtin:pmrfc3164
0575.552268952:7f195916f780: builtin:smfile
0575.552271745:7f195916f780: builtin:smtradfile
0575.552274601:7f195916f780: builtin:smfwd
0575.552277382:7f195916f780: builtin:smtradfwd
0575.552280447:7f195916f780: ommysql
0575.552283328:7f195916f780: imuxsock
0575.552286194:7f195916f780: immark
0575.552289160:7f195916f780: imudp
0575.552291936:7f195916f780: imtcp
0575.552304575:7f195916f780: GenerateLocalHostName uses 'localhost'
0575.552315738:7f195916f780: ratelimit:rsyslogd[dflt]:new
ratelimiter:bReduceRepeatMsgs 0
0575.552320449:7f195916f780: ratelimit:rsyslogd[internal_messages]:new
ratelimiter:bReduceRepeatMsgs 0
0575.552328619:7f195916f780: Writing pidfile '/var/run/rsyslogd.pid'.
[root at localhost ~]#
my rsyslog.conf
#rsyslog configuration file
# For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html
# If you experience problems, see <!-- m --><a class="postlink"
href="http://www.rsyslog.com/doc/troubleshoot.html">http://www.rsyslog.com/doc/troubleshoot.html</a><!--
m -->
$template insertpl,"insert into SystemEvents (Message, Facility, FromHost,
FromIP, Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag)
values ('%msg%', %syslogfacility%, '%HOSTNAME%', '%fromhost-ip%',
%syslogpriority%, '%timereported:::date-mysql%',
'%timegenerated:::date-mysql%', %iut%, '%syslogtag%')",SQL
$template stdmsg,"%timereported% %hostname% %fromhost-ip%
%syslogtag%%$!msg:::sp-if-no-1st-sp%%msg%\n"
#### MODULES ####
$ModLoad ommysql
*.*:ommysql:localhost,Syslog,rsyslog,XXXXXXX;insertpl
# The imjournal module bellow is now used as a message source instead of
imuxsock.
$ModLoad imuxsock
#$ModLoad imjournal
$ModLoad immark
$ModLoad imudp
$UDPServerRun 514
$ModLoad imtcp
$InputTCPServerRun 514
$ModLoad omfwd
*.* @@10.5.1.111:5514;stdmsg
#### GLOBAL DIRECTIVES ####
# Where to place auxiliary files
$WorkDirectory /var/lib/rsyslog
# Use default timestamp format
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
# File syncing capability is disabled by default. This feature is usually
not required,
# not useful and an extreme performance hit
#$ActionFileEnableSync on
# Include all config files in /etc/rsyslog.d/
$IncludeConfig /etc/rsyslog.d/*.conf
# Turn off message reception via local log socket;
# local messages are retrieved through imjournal now.
$OmitLocalLogging on
# File to store the position in the journal
$IMJournalStateFile imjournal.state
#### RULES ####
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console
# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none /var/log/messages
# The authpriv file has restricted access.
authpriv.* /var/log/secure
# Log all the mail messages in one place.
mail.* -/var/log/maillog
# Log cron stuff
cron.* /var/log/cron
# Everybody gets emergency messages
*.emerg :omusrmsg:*
# Save news errors of level crit and higher in a special file.
uucp,news.crit /var/log/spooler
# Save boot messages also to boot.log
local7.* /var/log/boot.log
# ### begin forwarding rule ###
# The statement between the begin ... end define a SINGLE forwarding
# rule. They belong together, do NOT split them. If you create multiple
# forwarding rules, duplicate the whole block!
# Remote Logging (we use TCP for reliable delivery)
#
# An on-disk queue is created for this action. If the remote host is
# down, messages are spooled to disk and sent when it is up again.
#$ActionQueueFileName fwdRule1 # unique name prefix for spool files
#$ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible)
#$ActionQueueSaveOnShutdown on # save messages to disk on shutdown
#$ActionQueueType LinkedList # run asynchronously
#$ActionResumeRetryCount -1 # infinite retries if host is down
# remote host is: name/ip:port, e.g. 192.168.0.i1:514, port optional
#*.* @@remote-host:514
i do not know how to fix this error
please help me again
thank you very much!
More information about the rsyslog-notify
mailing list