[rsyslog-notify] Forum Thread: Re: filter invalid syslogtag - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Fri Jul 8 11:16:22 CEST 2016


User: awinberg 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26755#p26755

Message: 
----------
Ok, quick test with the filter on a rhel6 box with same rsyslog version as
the logserver. 

command:
[code:3pxr9pk6]logger -t "test" -p local3.info
"TESTING"[/code:3pxr9pk6]

without filter:
message is not discarded and put in an invalid directory since the template
regex evaluates incorrectly

with filter:
message is discarded, as expected. 

So the issue to me seems to be that the procid is transformed from '-' on
the client to '' (empty string) on the logserver, and the filter comparison
does not work on empty properties.


More information about the rsyslog-notify mailing list