Please provide debug log. On Wed, 2013-04-10 at 09:04 +0000, C. L. Martinez wrote: > Hi all, > > I am trying to configure several actions using v7 syntax without luck. My > actual rsyslog.conf: > > #rsyslog v7 config file > > # if you experience problems, check > # http://www.rsyslog.com/troubleshoot for assistance > > # Increasing Message size > $MaxMessageSize 64k > > > #### MODULES #### > > # Input modules > > # Output modules > module(load="omfile") > module(load="omfwd") > #module(load="omtcp") > > > > #### Templates definitions #### > > $template srx_rfc5424fmt,"test_logs %fromhost-ip% %msg%\n" > > > #### RULES #### > > # Default spool directory > $WorkDirectory /data/logs/rsyslog > $MainMsgQueueFileName mainq > $MainMsgQueueType LinkedList > $MainMsgQueueSaveOnShutDown on > $MainMsgQueueMaxDiskSpace 40g > $MainMsgQueueSize 8000000 > > > if $fromhost-ip == '172.31.0.2' then { > action(type="omfwd" protocol="tcp" target="172.17.22.2" > port="20514" template="srx_rfc5424fmt" > queue.filename="junosfwd" > queue.maxdiskspace="10g" > queue.saveonshutdown="on" > queue.type="linkedlist" > queue.maxfilesize="20m" > action.resumeretrycount="-1") > action(type="omfile" file="/data/logs/plain/junsa.log" > template="RSYSLOG_TraditionalFileFormat") > stop > } > > but with this configuration, logs are not redirected or written to disk. > Any idea why?? > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT.
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
