[rsyslog] rfc-5424 over unix sockets

[Jason Nordwick]

I'm having trouble getting rsyslog to understand:

1- nanosecond timestamps with rfc-5424 parser
2- rfc-5424 messages over unix sockets

Here is my attempt at a config file. I had a hard time finding examples
online, and the documentation, while long, isn't very helpful to those who
don't already know the system:

global(workDirectory="/home/xxx/rs")

module(load="imudp")
module(load="imuxsock" SysSock.Use="off" SysSock.UseSysTimeStamp="off")
module(load="builtin:pmrfc5424")
module(load="builtin:omfile")

input(type="imudp"
port="1514"
ruleset="myparser")

ruleset(name="myparser" parser="rsyslog.rfc5424") {
action(type="omfile" file="/home/xxx/rs/udp0.log")
action(type="omfile" file="/home/xxx/rs/udpdebug0.log"
template="RSYSLOG_DebugFormat")
}

input(type="imuxsock"
socket="/home/xxx/rs/uxs"
ruleset="uxset")

ruleset(name="uxset" parser="rsyslog.rfc5424") {
action(type="omfile" file="/home/xxx/rs/ux0.log")
action(type="omfile" file="/home/xxx/rs/uxdebug0.log"
template="RSYSLOG_DebugFormat")
}
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.