Hi Rainer, thank you for the reply. I thought that this would be it. I'm glad I can confirm it now.
Milan Koudelka Principal SW engineer milan.koude...@gooddata.com +420 776 313 414 Danube House Karolinská 650/1 186 00 Prague 8, Czech Republic Twitter | Facebook | LinkedIn | Blog On Tue, Nov 2, 2021 at 7:01 PM Rainer Gerhards via rsyslog <rsyslog@lists.adiscon.com> wrote: > > That's by intention: new style defaults do not affect legacy defaults > and vice versa. If it did, one could override new style defaults > multiple times, which was one thing to avoid. > > It looks like old style defaults are also set. I would assume that > they are set AFTER the file writers. old style is position dependent. > > Please also note that "keep existing config" is advice only for simple > actions without many parameters. If you set file owner etc it is > definitely much easier to do via new style. > > HTH > Rainer > > El mar, 2 nov 2021 a las 12:23, Yuri Bushmelev via rsyslog > (<rsyslog@lists.adiscon.com>) escribió: > > > > Hello! > > > > Please read this: > > https://www.rsyslog.com/doc/master/configuration/modules/omfile.html > > > > You can configure default values for the module as described in the > > document above: > > ``` > > module(load="builtin:omfile" ...parameters...) > > ``` > > > > > > On Tue, 2 Nov 2021 at 18:16, Milan Koudelka via rsyslog < > > rsyslog@lists.adiscon.com> wrote: > > > > > Hi, > > > I tried to switch some rsyslog configurations to advanced format to > > > fine-tune actions. > > > > > > Instead of > > > local1.* /mnt/log/gdc;RawMsg > > > > > > I wrote > > > local1.* action(type="omfile" file="/mnt/log/gdc" template="RawMsg" > > > ioBufferSize="128k" queue.size="50000" queue.type="linkedlist" > > > queue.filename="gdc") > > > > > > As recommended, I kept other configurations as they were, if I don't > > > need any advanced configuration. > > > > > > Eg. > > > *.info;mail.none;authpriv.none;cron.none /mnt/log/messages > > > > > > But, I also changed legacy setting of file group ownership > > > $FileGroup splunk > > > $FileCreateMode 0640 > > > $DirGroup splunk > > > $DirCreateMode 0650 > > > > > > And I've put that directly to module load > > > module(load="builtin:omfile" Template="RSYSLOG_TraditionalFileFormat" > > > fileGroup="splunk" FileCreateMode="0640" dirGroup="splunk" > > > DirCreateMode="0650") > > > > > > The problem is, only the files configured with advanced format are > > > created with the correct group owner. /mnt/log/messages is created > > > under root user. Do I need to add back the legacy setting and keep > > > both in-module and legacy setting? > > > > > > Milan Koudelka > > > Principal SW engineer > > > milan.koude...@gooddata.com > > > +420 776 313 414 > > > > > > Danube House > > > Karolinská 650/1 > > > 186 00 Prague 8, Czech Republic > > > Twitter | Facebook | LinkedIn | Blog > > > _______________________________________________ > > > rsyslog mailing list > > > https://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > > DON'T LIKE THAT. > > > > > > > > -- > > Yury Bushmelev > > _______________________________________________ > > rsyslog mailing list > > https://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > > LIKE THAT. > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
