[rsyslog] Journald sending log to remote Rsyslog

Hi, I'm trying to send logs from a Workstation with Journald to my Rsyslog server. All references point to change "ForwardToSyslog=yes" in "/etc/systemd/journald.conf" (I don't know why I cannot find the "/run/systemd/journal/syslog" socket never) and Rsyslog getting from socket but in LOCALHO

[rsyslog] Remove spaces with property replace

Hi, This must to be a very easy solution, but I can't see it. I want remove spaces from a property replace result in a template, and I don't know why. My template: template(name="tLogJOSTwrt" type="list") {     constant(value="/logs/wrt/")     property(name="timereported" dateformat="year")

[rsyslog] [Maybe OFF-TOPIC] Add TAG in syslogd/klogd

Hi, I have a host with very old firmware that I cannot update, with syslogd/klogd 1.5.0. I'm sending their logs to remote Rsyslog server (Docker container actually), but when I filter for get files by hostname/source IP..., I don't get real "hostname" or "Fromhost" because it gives me host's

Re: [rsyslog] [Maybe OFF-TOPIC] Add TAG in syslogd/klogd

El 5/5/24 a las 21:28, David Lang escribió: On Sun, 5 May 2024, Alberto via rsyslog wrote: I have a host with very old firmware that I cannot update, with syslogd/klogd 1.5.0. I'm sending their logs to remote Rsyslog server (Docker container actually), but when I filter for get fil

Re: [rsyslog] [Maybe OFF-TOPIC] Add TAG in syslogd/klogd

El 5/5/24 a las 22:02, David Lang escribió: ... I only need filter by source, but all fields (FROMHOST, HOSTNAME, FROMHOST-IP...) that can give me any information are useless because appears Docker host IP, not real source host IP, and I cannot populate fromhost (I've probed, anyway). which

Re: [rsyslog] [Maybe OFF-TOPIC] Add TAG in syslogd/klogd

-Mensaje original- De: rsyslog En nombre de Yury Bushmelev via rsyslog Enviado el: lunes, 6 de mayo de 2024 7:37 Para: rsyslog-users CC: Yury Bushmelev Asunto: Re: [rsyslog] [Maybe OFF-TOPIC] Add TAG in syslogd/klogd Hello! If you can change the remote syslog port on your sender side, t

[rsyslog] imfile and permissions

Hi, I've configured a Fedora host for send Kodi logs to Rsyslog server in this way: /etc/rsyslog.d/aserver.conf --- # KODI... module(load="imfile" PollingInterval="10") input(type="imfile" file="/home/alberto/.var/app/tv.kodi.Kodi/data/temp/kodi.lo

Re: [rsyslog] imfile and permissions

El 12/8/24 a las 13:37, Alberto via rsyslog escribió: Hi, I've configured a Fedora host for send Kodi logs to Rsyslog server in this way: /etc/rsyslog.d/aserver.conf --- # KODI... module(load="imfile" PollingInterval="10&

[rsyslog] Remote log files without Line separator

Hi everybody: I have a logserver in a Docker container with "oficial" image (Rsyslog/syslog_appliance_alpine) running succesfully, and getting logs from Physical hosts from my LAN and anothers Docker containers hosted locally. I having a problem with a Router TP-Link with Openwrt system that i