[rsyslog-notify] Forum Thread: Re: filter invalid syslogtag - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Fri Jul 8 11:16:22 CEST 2016
User: awinberg
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26755#p26755
Message:
----------
Ok, quick test with the filter on a rhel6 box with same rsyslog version as
the logserver.
command:
[code:3pxr9pk6]logger -t "test" -p local3.info
"TESTING"[/code:3pxr9pk6]
without filter:
message is not discarded and put in an invalid directory since the template
regex evaluates incorrectly
with filter:
message is discarded, as expected.
So the issue to me seems to be that the procid is transformed from '-' on
the client to '' (empty string) on the logserver, and the filter comparison
does not work on empty properties.
More information about the rsyslog-notify
mailing list