rsyslog

The rocket-fast system for log processing

Changelog for 7.2.1 (v7-stable)

By adisconteamPosted on Posted in ChangelogTagged , , , , , , ,

Version 7.2.1  [v7-stable] 2012-10-29

  • bugfix: ruleset()-object did only support a single statement
  • added -D rsyslogd option to enable config parser debug mode
  • improved syntax error messages by outputting the error token
  • the rsyslog core now suspeneds actions after 10 failures in a row
    This was former the case after 1,000 failures and could cause rsyslog
    to be spammed/ressources misused. See the v6 compatibility doc for more details.
  • ommongodb rate-limits error messages to prevent spamming the syslog
    closes (for v7.2): http://bugzilla.adiscon.com/show_bug.cgi?id=366

Quick guide to omzmq3

By Adiscon SupportPosted on Posted in FAQTagged , , ,

Here is a quick guide for using rsyslog with omzmq3. The mentioned procedure has been tested with rsyslog 7.1.12. In future versions, this could be different.

1. Build zeromq 3.2.1-rc2

2. Build czmq 1.2.0, linking it with zeromq 3.2.1-rc2

3. Build rsyslog 7.1.12, using the “–enable-omzmq3” configure option

4. Configured rsyslog to publish all messages on a zmq bind socket:

*.* action(type="omzmq3" sockType="PUB" action="BIND" description="tcp://*:11514" template="any_message_template")

DON’T FORGET THE TEMPLATE: Otherwise, rsyslog will segfault.

 

Special Thanks go to Philippe Muller for providing this information

How to use rsyslog v7 on debian 5?

By Adiscon SupportPosted on Posted in FAQTagged , , ,

As development continues, there sometimes arises the need for additional packages to be installed in order to run the newest version. It is the same case for rsyslog. Since version 6.6.0 there is a requirement for json-c to be installed. For debian 6, there are packages available via package managers for easy installation. So there is no problem. For debian 5, the package repositories are unavailable and there is no .deb for json-c delivered on the disc. But without json-c, there is no chance to even install a current rsyslog on debian 5.

Gladly, there are other means to install json-c. There are tarballs available at

https://github.com/json-c/json-c/downloads

Unpack the tarball and install it with:

./configure --prefix=/usr
make
make install

Unfortunately, make install seems not to copy all the necessary files to correct destination. You still have to manually copy a single file. Do the following:

cp some/directory/json-c-0.10/json_object_iterator.h /usr/include/json/

Now you are all set up to install rsyslog 6.6.0 or 7.2.0 on a debian 5 system. If other packages are still missing (like bison), they are available as package on the disc.

rsyslog 7.2.0 (v7-stable) released

By Adiscon SupportPosted on Posted in News, Release AnnouncementTagged , , , , ,

We are proud to announce the first stable version of the v7 branch. It contains only minor bug fixes in addition to the latest beta.

With that version, a full structured-logging/lumberjack enabled version is now available. For the top 5 advantages of rsyslog v7, please see

http://www.rsyslog.com/main-advantages-of-rsyslog-v7-vs-v5/

With this release, version 5 of rsyslog becomes legacy and is no longer supported by the rsyslog project. However, rsyslog v5 continues to be supported as part of Adiscon’s professional services for rsyslog, please see

http://www.rsyslog.com/professional-services/enterprise-support/

We would also like to point you to Rainer’s blog, where he describes the importance of this release in more detail. The relationship to v6 is also clarified. Please see

http://blog.gerhards.net/2012/10/new-v7v6-stable-v5-now-legacy.html

 

ChangeLog:

http://www.rsyslog.com/changelog-for-7-2-0-v7-stable/

Download:

http://www.rsyslog.com/rsyslog-7-2-0-v7-stable/

As always, feedback is appreciated.

Best regards,
Florian Riedl

rsyslog 7.3.1 (v7-devel) released

By Adiscon SupportPosted on Posted in News, Release AnnouncementTagged , , , , , , ,

We have just released 7.3.1 of the v7-devel branch. This version increases template processing speed, for the $NOW-family of properties very considerably. It also contains a compatibility change in regard to lumberjack structured logging.

ChangeLog:

http://www.rsyslog.com/changelog-for-7-3-1-v7-devel/

Download:

http://www.rsyslog.com/rsyslog-7-3-1-v7-devel/

As always, feedback is appreciated.

Best regards,
Florian Riedl

Scroll to top