rsyslog 8.13.0 (v8-stable) released

We have released rsyslog 8.13.0.

This release sports a big number of changes. While most are bugfixes, there are also some additions to existing functionality, most notably the enhancements for ZeroMQ and Redis modules.

For more details, please take a look at the Changelog.
ChangeLog:

http://www.rsyslog.com/changelog-for-8-13-0-v8-stable/

Download:

http://www.rsyslog.com/downloads/download-v8-stable/

As always, feedback is appreciated.

Best regards,
Florian Riedl

librelp 1.2.8

librelp 1.2.8 [download]

This is a bugfixing release of librelp. It fixes a segfault that occurs if KEEPALIVE is used.

———————————————————————-

Version 1.2.8 – 2014-09-07
– bugfix: segfault if KEEPALIVE is used
  Thanks to Tomas Heinrich for the patch.


sha256sum: 2623a4146e55b2b79508832998b3017b23d0dd683729c20c572034a1743cb2e3

rsyslog 8.12.0 (v8-stable) released

We have released rsyslog 8.12.0.

This is primarily a bug-fixing release with a couple of improvements in omfile, imfile, GT/KSI, the testbench and many more. For more details, please take a look at the Changelog.
ChangeLog:

http://www.rsyslog.com/changelog-for-8-12-0-v8-stable/

Download:

http://www.rsyslog.com/downloads/download-v8-stable/

As always, feedback is appreciated.

Best regards,
Florian Riedl

Changelog for 8.12.0 (v8-stable)

Version 8.12.0 [v8-stable] 2015-08-11

  • Harmonize resetConfigVariables values and defaults
    see also https://github.com/rsyslog/rsyslog/pull/413
    Thanks to Tomas Heinrich for the patch.
  • GT/KSI: fix some issues in signature file format and add conversion tool
    The file format is incompatible to previous format, but tools have been upgraded to handle both and also an option been added to convert from old to new format.
  • bugfix: ommysql did not work when gnutls was enabled
    As it turned out, this was due to a check for GnuTLS functions with the side-effect that AC_CHECK_LIB, by default, adds the lib to LIBS, if there is no explicit action, what was the case here. So everything was now linked against GnuTLS, which in turn made ommysql fail.
    Thanks to Thomas D. (whissi) for the analysis of the ommysql/gnutls problem and Thomas Heinrich for pointing out that AC_CHECK_LIB might be the culprit.
  • bugfix omfile: potential memory leak on file close
    see also: https://github.com/rsyslog/rsyslog/pull/423
    Thanks to Robert Schiele for the patch.
  • bugfix omfile: potential race in dynafile detection/creation
    This could lead to a segfault.
    Thanks to Tomas Heinrich for the patch.
  • bugfix omfile: Fix race-condition detection in path-creation code
    The affected code is used to detect a race condition in between testing for the existence of a directory and creating it if it didn’t exist.  The variable tracking the number of attempts wasn’t reset for subsequent elements in the path, thus limiting the number of reattempts to one per the whole path, instead of one per each path element.
    This solution was provided by Martin Poole.
  • bugfix parser subsystem: potential misadressing in SanitizeMsg() could lead to a segfault
    Thanks to Tomas Heinrich for the patch.
  • imfile: files moved outside of directory are now (properly) handled
  • bugfix: imfile: segfault when using startmsg.regex if first log line doesn’t match
    Thanks to Ciprian Hacman for the patch.
  • bugfix imfile: file table was corrupted when on file deletion
    This could happen when a file that was statically configured (not via an wildcard) was deleted.
  • bugfix ompgsql: transaction were improperly handled
    Now transaction support is solidly disabled until we have enough requests to implement it again. Module still works fine in single insert mode.
    closes https://github.com/rsyslog/rsyslog/issues/399
  • bugfix mmjsonparse: memory leak if non-cee-json message is processed
    see also https://github.com/rsyslog/rsyslog/pull/383
    Thanks to Anton Matveenko for the patch
  • testbench: remove raciness from UDP based tests
  • testbench: added bash into all scripts makign it mandatory
  • bugfix testbench: Fixed problem building syslog_caller util when liblogging-stdlog is not available.
    Thanks to Louis Bouchard for the patch
  • bugfix rscryutil.1: Added fix checking for generate_man_pages condition
    Thanks to Radovan Sroka for the patch
  • bugfix freebsd console: \n (NL) is prepended with \r (CR) in console output on freebsd only. For more details see here:
    https://github.com/rsyslog/rsyslog/issues/372
    Thanks to AlexandreFenyo for the patch

Packages for newer Ubuntu versions

With the latest release of rsyslog (8.11.0) we have also introduced a new set of packages that we will produce from now on. We have now added rsyslog release packages for Ubuntu Utopic, Vivid and Wily to the list. Thus, you can now use the packages made by Adiscon on newer Ubuntu versions, too, even on the upcoming version.

And, new releases get a package shortly after the official source release, so you can easily stay up to date with rsyslog on a larger variety of Ubuntu distros. For now, we will also keep making the packages for Precise and Trusty.

rsyslog 8.11.0 (v8-stable) released

We have released rsyslog 8.11.0.

This release now provides a new signature provider for Keyless Signature Infrastructure (KSI) as well as quite a few fixes for imfile, omkafka, the build system and others.
ChangeLog:

http://www.rsyslog.com/changelog-for-8-11-0-v8-stable/

Download:

http://www.rsyslog.com/downloads/download-v8-stable/

As always, feedback is appreciated.

Best regards,
Florian Riedl

Changelog for 8.11.0 (v8-stable)

Version 8.11.0 [v8-stable] 2015-06-30

  • new signature provider for Keyless Signature Infrastructure (KSI) added
  • build system: re-enable use of “make distcheck”
  • bugfix imfile: regex multiline mode ignored escapeLF option
    Thanks to Ciprian Hacman for reporting the problem
    closes https://github.com/rsyslog/rsyslog/issues/370
  • bugfix omkafka: fixed several concurrency issues, most of them related to dynamic topics.
    Thanks to Janmejay Singh for the patch.
  • bugfix: execonlywhenpreviousissuspended did not work correctly
    This especially caused problems when an action with this attribute was configured with an action queue.
  • bugfix core engine: ensured global variable atomicity
    This could lead to problems in RainerScript, as well as probably in other areas where global variables are used inside rsyslog. I wouldn’t outrule it could lead to segfaults.
    Thanks to Janmejay Singh for the patch.
  • bugfix imfile: segfault when using startmsg.regex because of empty log line
    closes https://github.com/rsyslog/rsyslog/issues/357
    Thanks to Ciprian Hacman for the patch.
  • bugfix: build problem on Solaris
    Thanks to Dagobert Michelsen for reporting this and getting us up to
    speed on the openCWS build farm.
  • bugfix: build system strndup was used even if not present now added compatibility function. This came up on Solaris builds.
    Thanks to Dagobert Michelsen for reporting the problem.
    closes https://github.com/rsyslog/rsyslog/issues/347

 

LogAnalyzer: Facility and Severity is missing

Question: I use a logfile of rsyslog as source type in LogAnalyzer, everything is good but the facility and severity information tabs of the messages are missing, like in this screenshot.

Answer: The solution is rather simple, your current file template does not contain syslog priority or facility. Kindly switch to RSYSLOG_SyslogProtocol23Format which is RFC5424 format which contains the required information. You can use the template for a single action or you can use it as the default template. Below you can find a example for both cases:
Please note that this example only apply to a single logfile:

mail.* /var/log/maillog;RSYSLOG_SyslogProtocol23Format

This is the example for a default template:

$ActionFileDefaultTemplate RSYSLOG_SyslogProtocol23Format

Please note that you need to change the logfile type to RSyslog Format23 in your Loganalyzer logstream sources as well. You can do that by editing the “config.php” of LogAnalyzer.
Open the “config.php” with your favourite editor and add the following line to the correct source:

$CFG[‘Sources’][‘Source1’][‘LogLineType’] = “Syslog23”;

Afterwards the configuration should look like this.
Don’t forget to save the changes. Now you can refresh the Webpanel of LogAnalyzer and then you should see the facility and severity missing information tabs, like in this screenshot.

RSyslog Windows Agent 3.1 Released

Adiscon is proud to announce the 3.1 release of RSyslog Windows Agent.

This is a maintenenance release for RSyslog Windows Agent. It includes some bugfixes as well as a new rule date condition which can be used to process events starting from a certain date. A few new options have been added into the Syslog Service as well.

Detailed information can be found in the version history below.

Build-IDs: Service 3.1.0.134, Client 3.1.0.213

Features

  • All internal errors are now logged into the EventLog when “Event Warnings” are enabled in general options.
  • Added Rule Date Conditions. By default a rule will always be processed. It can be set to only process messages generated since the installation or custom date.
  • Syslog Server: Added new Option to save original source into custom property when using “Take Source system from Syslog message” option.
  • File Monitor: Files are now opened with FILE_SHARE_DELETE flag which enables other applications to delete them (like logrotation tools do).

Bugfixes

  • SSL Connections: Fixed an issue not using custom configured certificates when TLS anon mod was used.
  • FileConfig Mode: Fixed a bug loading filters properly. Also added support for reloading data variables automatically.
  • Core Engine: Fixed an internal processing bug caused when rebuilding Messages from cache files.
  • Syslog Server: RFC 5424 header parsing fixed, a timestamp can be a NILVALUE now.
  • Syslog Server: Fixed bug ignoring “Take Source system from Syslog message” option when UDP was used.

Version 3.1 is a free download. Customers with existing 2.x keys can contact our Sales department for upgrade prices. If you have a valid Upgrade Insurance ID, you can request a free new key by sending your Upgrade Insurance ID to sales@adiscon.com. Please note that the download enables the free 30-day trial version if used without a key – so you can right now go ahead and evaluate it.

rsyslog 8.10.0 (v8-stable) released

We have released rsyslog 8.10.0.

This provides a number of new features and fixes in several modules, like imfile, zmq and others. It also adds a new contributed module omhttpfs for writing to HDFS via HTTP.
ChangeLog:

http://www.rsyslog.com/changelog-for-8-10-0-v8-stable/

Download:

http://www.rsyslog.com/downloads/download-v8-stable/

As always, feedback is appreciated.

Best regards,
Florian Riedl

Scroll to top