Details
-
Help
-
Resolution: Fixed
-
Trivial
-
None
-
None
-
None
Description
The documentation at http://observium.org/docs/syslog/#rsyslogd looks kind of outdated. The syntax for rsyslog configuration changed in version 7 which is already outdated. Version 8.x is stable at the moment. As some things didn't work with the documented config I changed it like this:
#---------------------------------------------------------
|
#send remote logs to observium
|
|
|
template(name="observium"
|
type="string"
|
string="%fromhost-ip%||%syslogfacility%||%syslogpriority%||%syslogseverity%||%syslogtag%||%$year%-%$month%-%$day% %timereported:8:25%||%msg%||%programname%\n")
|
|
|
$ModLoad omprog
|
|
|
# rsyslog Input Modules
|
input(type="imudp"
|
port="514"
|
ruleset="observium")
|
|
|
# rsyslog RuleSets
|
ruleset(name="observium") {
|
action(type="omprog"
|
binary="/opt/observium/syslog.php"
|
template="observium")
|
action(type="omfile"
|
file="/opt/rsyslog/remote.log")
|
}
|
*.* stop
|
#---------------------------------------------------------
|
Attachments
Activity
I use version 8.4.x. I just remember that I tried to log additional into a file and had some trouble with that. At some point I decided that it might be easier to use the recommended configuration syntax for that version.
So I might be wrong that the old syntax does not work anymore.
Tnx, I will update doc for 8.x.
But what things didn't work with old config example in 7.x?
I use old config with 7.4.4 without any troubles.
I just noticed, that the following part of the configuration is no good:
*.* stopIt stops the whole logging workflow and results in a non working local message logging i.e. to /var/log/messages.
In former versions it was needed to prevent remote syslog messages for observium to occur in local message log files like /var/log/messages but this isn't the case any more.
=> this line is not needed any more in the configuration for v8 and later.