[rsyslog-notify] Forum Thread: Legacy to Modern - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Fri Sep 18 13:42:57 CEST 2015


User: mpse 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25927#p25927

Message: 
----------
Hello,

I am trying to convert a working legacy rsyslog configuration to modern
syntax. I am using "imfile" as input and "omrelp" as output. So far I got
most of the configuration completed, however, I missing something as the
new modern configuration is not working.

I believe the main culprit is not finding the modern equivalent of the
legacy "$InputRunFileMonitor". The documentation of the "imfile" mentions
the equivalent parameters except for the "$InputRunFileMonitor". I tried
various combinations with no luck.

Another piece I am missing is the modern equivalent of the legacy
"$EscapeControlCharactersOnReceive off". I tried using
"global(parser.escapeControlCharachtersOnReceive="off")" but rsyslog did
not like it.

Example (Legacy):

$ModLoad omrelp
local7.* :omrelp:192.168.16.146:20514;RSYSLOG_ForwardFormat
$EscapeControlCharactersOnReceive off

$InputFileName /var/log/sources/stats.log
$InputFileTag stats
$InputFileStateFile stat-stats
$InputFileSeverity info
$InputFileFacility local7
$InputRunFileMonitor

Converted (Modern):

module(load="omrelp" target="192.168.146" port="20514"
template="RSYSLOG_ForwardFormat")
module(load="imfile" PollingInterval="1")

input(type="imfile"
	File="/var/log/sources/stats.log" 
	Tag="stats" 
	Severity="info" 
	Facility="local7")

Here is the rsyslog version running on Ubuntu 14.04 LTS.

$ rsyslogd -v
rsyslogd 8.12.0, compiled with:
	PLATFORM:				x86_64-pc-linux-gnu
	PLATFORM (lsb_release -d):		
	FEATURE_REGEXP:				Yes
	GSSAPI Kerberos 5 support:		No
	FEATURE_DEBUG (debug build, slow code):	No
	32bit Atomic operations supported:	Yes
	64bit Atomic operations supported:	Yes
	memory allocator:			system default
	Runtime Instrumentation (slow code):	No
	uuid support:				Yes
	Number of Bits in RainerScript integers: 64

Any pointers on the right direction are welcome.

Thanks.


More information about the rsyslog-notify mailing list