Frequently Asked Questions

Some things are simply often asked. Here we provide the answers! So it is a good idea to check this area if you run into queries. if you have questions that should be explained here, please let us know.

General questions

• Encasing of control structures

• Avoid overly-large in memory queues

• solving rsyslog write errors

• How to sign log records with Guardtime KSI blockchain

• How to create debug information with strace

• LogAnalyzer: Facility and Severity is missing

• Guardtime KSI services responding with error 401

• Masking data in logs and RSYSLOG

• How to use a parser module

• Plugin Overview (Input and Output, only)

• How to use set variable and exec_template

• Error message when verifying signed logs

• How to Contribute to rsyslog?

• Contribution Policy

• Where to find the rsyslog source code

• How to use impstats

• Lower Bound for Queue Sizes

• impstats delayed or lost? – cause and cure

• Howto anonymize messages that go to specific files

• How to add a HMAC to RFC5424 structured data messages

• How to add a module global parameter

• How to obtain a specific Doc Version?

• HIPAA compliance through rsyslog

• Encrypted disk queues

• [deprecated] How to sign log messages through signature provider Guardtime

• How can I check the config?

• How to use the Ubuntu repository

• Filter optimization with arrays

• What is the difference between timereported and timegenerated?

• Log Normalization and special characters

• rulesets and rsyslog 7.2+

• Quick guide to omzmq3

• How to use rsyslog v7 on debian 5?

• How to use rsyslog and MongoDB

• How to use authpriv on Solaris

• How to set variables in rsyslog v7

• BSD-Style blocks will go away in rsyslog v7

• How to check if config variables are used?

• How to bind a template

• TCP syslog / RFC5424 log4j appender

• Load balancing for rsyslog

• rsyslog statistics counter

• What are “Trusted Properties”?

• Log normalization and the leading space

• Using rsyslog mmnormalize module effectively with Adiscon LogAnalyzer

• Why does imuxsock not work on Solaris?

• Using a strgen module to write into a database

• Adding the BOM to a message

• Why does the rsyslog testbench sometimes fail?

• CentOS 5: how to compile rsyslog from git

• normalizer – first steps for mmnormalize

• Install locations for rsyslog

• How to use tcpflood for rsyslog testing?

• Installing RSyslog 5 on RHEL 4 / 5

• How to use rate limiting in rsyslog?

• How to build the testing tools?

• How to use debug on demand?

• Periodic statistics on rsyslog counters

• Preserving syslog sender over NAT

• Build problems with 0.9.6

• Does rsyslog support RFC3195/COOKED?

• How to automatically delete database contents?

• How to separate log files by host name of sending device?

Windows client questions

• rsyslog statistic counter plugin imuxsocks