MonitorWare Knowledge Base

Hey,

I'm trying to use rsyslog and I want to filter out messages that contain the phrase, "imapd". Here's my conf lines.

Code: Select all

:Message, contains, "imapd" ~
*.*             >localhost,Syslog,user,password

However, it's not happening... any ideas?

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Indeed The property name is "msg". Try

Code: Select all

:msg, contains, "imapd" ~


I'll check if there is a doc error, but that should work now.

Rainer

I tried it again, killed the service, restarted it, and still same results.

I have this at the top of my rsyslog.conf file, started the script using "/usr/sbin/rsyslogd -r -m0 -f /etc/rsyslog.conf"

Hey, Brad again. I think I figured it out.

I was using version 1.0.2, and I think that the :msg works with 1.10.2. Seems to be happy again now.

Ah, I see. Yes, these features are currently in the development branch only. This will remain for some while to go. Because stable is stable as it only receives bug-fixing but no new code (which could introduce new bugs...).

I am glad it works now.

Rainer