imkmsg: /dev/kmsg Log Input Module¶
|Author:||Rainer Gerhards <firstname.lastname@example.org> Milan Bartos <email@example.com>|
Reads messages from the /dev/kmsg structured kernel log and submits them to the syslog engine.
The printk log buffer contains log records. These records are exported by /dev/kmsg device as structured data in the following format: “level,sequnum,timestamp;<message text>\n” There could be continuation lines starting with space that contains key/value pairs. Log messages are parsed as necessary into rsyslog msg_t structure. Continuation lines are parsed as json key/value pairs and added into rsyslog’s message json representation.
Parameter names are case-insensitive.
This module has no configuration directives.
This module can’t be used together with imklog module. When using one of them, make sure the other one is not enabled.
This is Linux specific module and requires /dev/kmsg device with structured kernel logs.
The following sample pulls messages from the /dev/kmsg log device. All parameters are left by default, which is usually a good idea. Please note that loading the plugin is sufficient to activate it. No directive is needed to start pulling messages.
If you would like to contribute to these docs, but are unsure where to start, please see the rsyslog-doc project README for an overview of the process. If you would like to contribute to the main source project, please review the contribution guidelines listed in the rsyslog project README.
If you have a question about these docs or
Rsyslog in general, please
see the following resources: