MonitorWare Knowledge Base

No - as I said, I suggest to look at a debug log. It will definitely provide insight, as you see what exactly happens

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

OK, I'll generate a debug log and send it for your analysis.

thanks!

Sure, but I suggest you have a look yourself first. often, it is very obvious what happens if you look at the log...

debug file generated...

I took a look at it but seems like Greek to me

I'll provide you with a copy via email if you don't mind as I don't want some info to be disclosed here.

Thanks!

pls mail to rgerhards@gmail.com and let me know when you have done so. If you don't hear back by next monday, please ping me.

Sent!

Thanks!!

Just in case you didn't notice. I replied yesterday, the log did not contain any data for the rules in question (just the startup and shutdown message, but nothing from those remote systems). Please provide a log that has some samples that should trigger the rules

Yes, I saw your email. Anyway, it's a good idea to keep this thread updated and in english, just in case someone else stumbles on the same issue...

As for the debug log... I'll implement the filters on the primary logserver to see if they are triggered (they weren't the first time I defined them on that host).
I'll post back once I have something to show...


thanks