[syslog-ng] [Bug 128] template() broken in latest 3.3 git
Nix
nix at esperi.org.uk
Tue Jul 19 12:55:19 CEST 2011
On 14 Jul 2011, bugzilla at bugzilla.balabit.com told this:
> https://bugzilla.balabit.com/show_bug.cgi?id=128
>
>
> Balazs Scheidler <bazsi at balabit.hu> changed:
>
> What |Removed |Added
> ----------------------------------------------------------------------------
> CC| |bazsi at balabit.hu
> Resolution| |FIXED
> Status|ASSIGNED |RESOLVED
>
>
>
>
> --- Comment #3 from Balazs Scheidler <bazsi at balabit.hu> 2011-07-14 12:29:48 ---
> integrated, thanks.
This is seemingly still broken :( (and so are my fingers, sorry for the
last email with a subject line describing this and completely different
content).
My syslog-ng-3.3 config is derived directly from a syslog-ng-3.0 config
saving only an adjustment of tcp() and udp(). The config is attached.
syslog-ng-3.0 emits things looking like this:
Jul 18 14:52:17 fold info: p6IDqFJu004668: Milter add: header: X-DCC-URT-Metrics: spindle 1060; Body=many Fuz1=many Fuz2=many
Jul 18 14:52:17 fold info: p6IDqFJu004668: to=<nix at esperi.org.uk>, delay=00:00:01, xdelay=00:00:00, mailer=local, pri=144021, dsn=2.0.0, stat=Sent
Jul 18 14:52:38 fold notice: ruleset=check_relay, arg1=[41.201.240.140], arg2=41.201.240.140, relay=[41.201.240.140], reject=550 5.7.1 Fix reverse DNS for 41.201.240.140
Jul 18 14:52:56 fold info: p6IDqtS6004673: from=<linux-kernel-owner at vger.kernel.org>, size=2651, class=-60, nrcpts=1, msgid=<20110718135243.GA5349 at suse.de>, bodytype=8BITMIME, proto=ESMTP, daemon=MTA, relay=vger.kernel.org [209.132.180.67]
Jul 18 14:52:56 fold info: p6IDqtS6004673: Milter add: header: X-DCC-URT-Metrics: spindle 1060; Body=1 Fuz1=1 Fuz2=1
i.e. ordinary-looking log messages, slightly adjusted.
syslog-ng-3.3 from git head as of yesterday (including the attempted
fix) emits this:
priority_templatepriority_templatepriority_templatepriority_template[...]
endlessly: one 'priority_template' per message, no linefeeds.
It looks like
template priority_template
{
template("$S_DATE $HOST $PRIORITY: $MESSAGE\n");
template_escape(no);
};
destination by-facility
{
file("/var/log/by-facility/$FACILITY" template(priority_template) suppress(30));
};
is emitting the *words* 'priority_template' into the file.
Full syslog-ng.conf attached, sorry that it's so ugly and verbose, I
want a proper lisp-style macro system. :) or perhaps I can just generate
it from m4... probably there is a really neat way of doing what I'm
doing in here in about six lines, but I haven't revised it much since
the syslog-ng-2.x days and I couldn't find a neater approach then.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: syslog-ng-3.3.conf
Url: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20110719/f92c7c86/attachment.txt
More information about the syslog-ng
mailing list