[rsyslog-notify] Forum Thread: Re: Wildcard in Path not working 8.25.0 - (Mode 'edit')

noreply at adiscon.com noreply at adiscon.com
Thu Mar 16 09:13:24 CET 2017


User: Mr.EoniX 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=27201#p27201

Message: 
----------
Just did an even simpler test.

/sbin/rsyslogd -v
rsyslogd 8.25.0, compiled with:
        PLATFORM:                               x86_64-redhat-linux-gnu
        PLATFORM (lsb_release -d):
        FEATURE_REGEXP:                         Yes
        GSSAPI Kerberos 5 support:              No
        FEATURE_DEBUG (debug build, slow code): No
        32bit Atomic operations supported:      Yes
        64bit Atomic operations supported:      Yes
        memory allocator:                       system default
        Runtime Instrumentation (slow code):    No
        uuid support:                           Yes
        Number of Bits in RainerScript integers: 64

Here is the config:

# Provides Logfile shipping
module(load="imfile")
input(type="imfile" tag="umserver" file="/tmp/*/hello/file.txt"
ruleset="shipLogFiles")
#Actual file location: input(type="imfile" tag="umserver"
file="/tmp/b/hello/file.txt" ruleset="shipLogFiles")

#### RULES ####

ruleset(name="shipLogFiles"
                queue.workerThreads="2"
                queue.type="direct"
                queue.size="20000000"
                queue.filename="shipLogFiles"
                queue.spoolDirectory="/var/log/rsyslog/queues"
                queue.dequeueBatchSize="1"
                queue.saveonshutdown="on"
       ) {
        action(type="omrelp"
                target="x.x.x.x"
                port="5000"
                windowSize="1024"
                rebindInterval="20000"
                timeout="10"
                conn.timeout="2"
                template="logstash"
                queue.checkpointinterval="1000"
                queue.workerThreads="20"
                queue.type="disk"
                queue.syncqueuefiles="off"
                queue.size="20000000"
                queue.filename="logfileTcpForward5000"
                queue.spoolDirectory="/var/log/rsyslog/queues"
                queue.dequeueBatchSize="100"
                queue.maxDiskSpace="10g"        # it will stop at this much
disk space
                queue.saveonshutdown="on"
                queue.timeoutactioncompletion="3000000"
                queue.timeoutenqueue="3000000"
                action.ResumeInterval="1"
                action.ResumeRetryCount="-1"
                action.reportSuspension="off"
                action.reportSuspensionContinuation="off"
        )
}

Why is the wildcard feature not working in the Path?


More information about the rsyslog-notify mailing list