I figured it out. I had a second line in that same file that started with:
if $progamname == "systemd-logind" I was missing the second 'r' in programname. :( Sorry for the bother. On Thu, May 4, 2023 at 6:10 AM Brad Van Orden <brad.vanor...@gmail.com> wrote: > version is 8.2102.0-10.el8 > rsyslogd -N1 spits out: > rsyslogd: error during parsing file > /etc/rsyslog.d/ignore-systemd-session-slice.conf, on or before line 2: > invalid property 'programname' [v8.2102.0-10.el8 try > https://www.rsyslog.com/e/2207 ] > > rsyslog.conf: > > $PreserverFQDN on > $ModLoad imuxsock > $ModLoad imklog > $IncludeConfig /etc/rsyslog.d/*.conf > *.info;mail.none;authpriv.none;cron.none /var/log/messages > authpriv.* /var/log/secure > mail.* > -/var/log/maillog > cron.* /var/log/cron > *.emerg :omusrmsg:* > uucp,news.crit /var/log/spooler > local6.* /var/log/dhcpd > local7.* /var/log/boot.log > $WorkDirectory /var/lib/rsyslog > $ActionQueueFileName fwdSyslog > $ActionQueueMaxDiskSpace 500m > $ActionQueueSaveOnShutdown on > $ActionQueueType LinkedList > $ActionQueueResumeRetryCount -1 > *.debug @1.2.3.4:10975 > > We are running RHEL 8.7. > > On Thu, May 4, 2023 at 5:48 AM Rainer Gerhards <rgerha...@hq.adiscon.com> > wrote: > >> This is strange. No,everything is supported, we never remove any >> config capability without very, very strong reason. Plus, the "if" is >> not BSD-Style but script, the most modern filter. >> >> Which version is running on RHEL 8? >> How does the full config look like? >> What does rsyslogd -N1 split out? >> >> Rainer >> >> El jue, 4 may 2023 a las 11:29, Brad Van Orden via rsyslog >> (<rsyslog@lists.adiscon.com>) escribió: >> > >> > On RHEL 7, I have a filter: >> > >> > if $programname == "systemd" and ( $msg contains "Starting Session" or >> $msg >> > contains "Started Session" ) then stop >> > >> > which works fine. However under RHEL 8, I get >> > >> > invalid property 'programname' >> > >> > I think this is because BSD type filters are no longer supported, but >> I'm >> > not sure how to change this to the new style. I don't see an example of >> > how to make a compound filter: >> > >> > :programname, isequal, "systemd" stop >> > >> > I'm not sure where to add the msg filters in? Could someone point me to >> > the correct documentation? >> > >> > Thanks! >> > _______________________________________________ >> > rsyslog mailing list >> > https://lists.adiscon.net/mailman/listinfo/rsyslog >> > http://www.rsyslog.com/professional-services/ >> > What's up with rsyslog? Follow https://twitter.com/rgerhards >> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if >> you DON'T LIKE THAT. >> > _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
