[rsyslog-notify] Forum Thread: Re: filter invalid syslogtag - (Mode 'reply')
    noreply at adiscon.com 
    noreply at adiscon.com
       
    Fri Jul  8 11:16:22 CEST 2016
    
    
  
User: awinberg 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26755#p26755
Message: 
----------
Ok, quick test with the filter on a rhel6 box with same rsyslog version as
the logserver. 
command:
[code:3pxr9pk6]logger -t "test" -p local3.info
"TESTING"[/code:3pxr9pk6]
without filter:
message is not discarded and put in an invalid directory since the template
regex evaluates incorrectly
with filter:
message is discarded, as expected. 
So the issue to me seems to be that the procid is transformed from '-' on
the client to '' (empty string) on the logserver, and the filter comparison
does not work on empty properties.
    
    
More information about the rsyslog-notify
mailing list