[syslog-ng] [Bug 128] template() broken in latest 3.3 git

Nix nix at esperi.org.uk
Tue Jul 19 12:55:19 CEST 2011


On 14 Jul 2011, bugzilla at bugzilla.balabit.com told this:

> https://bugzilla.balabit.com/show_bug.cgi?id=128
>
>
> Balazs Scheidler <bazsi at balabit.hu> changed:
>
>            What    |Removed                     |Added
> ----------------------------------------------------------------------------
>                  CC|                            |bazsi at balabit.hu
>          Resolution|                            |FIXED
>              Status|ASSIGNED                    |RESOLVED
>
>
>
>
> --- Comment #3 from Balazs Scheidler <bazsi at balabit.hu>  2011-07-14 12:29:48 ---
> integrated, thanks.

This is seemingly still broken :( (and so are my fingers, sorry for the
last email with a subject line describing this and completely different
content).

My syslog-ng-3.3 config is derived directly from a syslog-ng-3.0 config
saving only an adjustment of tcp() and udp(). The config is attached.
syslog-ng-3.0 emits things looking like this:

Jul 18 14:52:17 fold info: p6IDqFJu004668: Milter add: header: X-DCC-URT-Metrics: spindle 1060; Body=many Fuz1=many Fuz2=many
Jul 18 14:52:17 fold info: p6IDqFJu004668: to=<nix at esperi.org.uk>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=144021, dsn=2.0.0, stat=Sent
Jul 18 14:52:38 fold notice: ruleset=check_relay, arg1=[41.201.240.140], arg2=41.201.240.140, relay=[41.201.240.140], reject=550 5.7.1 Fix reverse DNS for 41.201.240.140
Jul 18 14:52:56 fold info: p6IDqtS6004673: from=<linux-kernel-owner at vger.kernel.org>, size=2651, class=-60, nrcpts=1, msgid=<20110718135243.GA5349 at suse.de>, bodytype=8BITMIME, proto=ESMTP, daemon=MTA, relay=vger.kernel.org [209.132.180.67]
Jul 18 14:52:56 fold info: p6IDqtS6004673: Milter add: header: X-DCC-URT-Metrics: spindle 1060; Body=1 Fuz1=1 Fuz2=1

i.e. ordinary-looking log messages, slightly adjusted.

syslog-ng-3.3 from git head as of yesterday (including the attempted
fix) emits this:

priority_templatepriority_templatepriority_templatepriority_template[...]

endlessly: one 'priority_template' per message, no linefeeds.

It looks like

template priority_template
 {
  template("$S_DATE $HOST $PRIORITY: $MESSAGE\n");
  template_escape(no);
 };

destination by-facility
 {
  file("/var/log/by-facility/$FACILITY" template(priority_template) suppress(30));
 };

is emitting the *words* 'priority_template' into the file.

Full syslog-ng.conf attached, sorry that it's so ugly and verbose, I
want a proper lisp-style macro system. :) or perhaps I can just generate
it from m4... probably there is a really neat way of doing what I'm
doing in here in about six lines, but I haven't revised it much since
the syslog-ng-2.x days and I couldn't find a neater approach then.

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: syslog-ng-3.3.conf
Url: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20110719/f92c7c86/attachment.txt 


More information about the syslog-ng mailing list