typically when this sort of thing happens, it's because of an error earlier in
the ruleset, mismatched quotes or braces, run rsyslogd -N1 and look at the
location of the first error and the lines just before that.
rulesets are supported, rsyslog is VERY careful to maintain backwards
compatibility, and the few times when we've broken it, it's only been after a
long discussion of how we can't fix the security bug any other way. There are
other things that have been filed as bugs that the reaction boils down to "you
are right, that would be a better way, but we can't change now without breaking
compatibility, so it needs to stay the way it is"
David Lang
On Sat, 27 Aug 2022, Ben Hart via rsyslog wrote:
Date: Sat, 27 Aug 2022 21:25:49 +0000
From: Ben Hart via rsyslog <rsyslog@lists.adiscon.com>
To: "rsyslog@lists.adiscon.com" <rsyslog@lists.adiscon.com>
Cc: Ben Hart <ben.h...@jamf.com>
Subject: [rsyslog] Rule sets and version 8.2112
Hello all! So I’m building a syslog server on Ubuntu 22 LTS and the repos
contain rsyslog version 8.2112. Ive built some rulesets in a custom rsyslog.d
file, except I get errors regarding the input listeners at the bottom.
Specifically ‘port’ and ‘rule set’.
Input module name ‘imudp’ is unknown.
Parameter ‘ruleset’ is unknown
Parameter ‘Port’ is unknown
The conf is here:
https://paste.ubuntu.com/p/cHYZzhh8Gy/plain/
But when I look at the docs for this version, it says rulesets are supported
and all examples look like what I have used.
If I need to upgrade to the latest I can but I’d really like to know what the
correct syntax is for this version.
Thanks!
Sent from my iPhone
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
