timegenerated bug

This is the place for developers to discuss bugs, new features and everything else about code changes.

Google Ads


timegenerated bug

Postby martinf » Thu Nov 06, 2014 1:55 am

I've run in to a strange bug when working with time stamps.
I'm using Rsyslog 8.4.0 on Centos 6.5.
I have one rsyslog computer (A) sending logs to computer(B).
B is using imtcp with the ruleset tag="remotelogs"
I have a template that will print the two timestamps, timereported and timegenerated.
In the ruleset "remotelogs", I have a omfile module writing to a file using the template with the two time stamps. The timestamps are different.

Ruleset remotelogs are calling another ruleset "formating".
In the ruleset formating, I also use omfile module writing to a different file, using the same template. The two timestamps are now identical. Somehow something has overwritten timegenerated with timereporte!
Any Ideas?
/Martin
martinf
New
 
Posts: 4
Joined: Tue Oct 28, 2014 4:30 am

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Re: timegenerated bug

Postby dlang » Thu Nov 06, 2014 2:24 am

could you show us the config and sample output?

I agree that this sounds like a bug.
dlang
Frequent Poster
 
Posts: 1001
Joined: Mon Sep 15, 2008 7:44 am

Re: timegenerated bug

Postby martinf » Thu Nov 06, 2014 3:28 am

It all seems to be linked to queue.
Created two test computers and isolated the "symptoms" (not sure what the problem is yet...).

Receiving server in /etc/rsyslog.d
#cat 01-test.conf
module(load="imtcp" )
module(load="imudp" )
input(type="imudp" port="514" ruleset="remotelogs")
input(type="imtcp" port="514" ruleset="remotelogs")
template(name="timetest" type="list"){
property(name="timereported") constant(value="\n")
property(name="timegenerated") constant(value="\n\n")
}
ruleset(name="remotelogs"){
/var/log/timetest0.log;timetest
set $!test=$app-name;
call formating
}

ruleset(name="formating"
queue.type="linkedlist"
){
/var/log/timetest1.log;timetest
}

---------------------
another test computer is now sending logs and I'm getting two log files as per below.
---
# cat /var/log/timetest0.log
Nov 6 15:22:32
Nov 6 15:22:25

Nov 6 15:22:32
Nov 6 15:22:25

Nov 6 15:22:32
Nov 6 15:22:25

# cat /var/log/timetest1.log
Nov 6 15:22:32
Nov 6 15:22:32

Nov 6 15:22:32
Nov 6 15:22:32

Nov 6 15:22:32
Nov 6 15:22:32


-----
if I comment out queue.type="linkedlist" in the ruleset formating, it all works as it should... Same issue with fixedarray.
/Martin
martinf
New
 
Posts: 4
Joined: Tue Oct 28, 2014 4:30 am

Google Ads



Return to Developer's Corner

Who is online

Users browsing this forum: No registered users and 0 guests

cron