[syslog-ng] rewrite error

[operacoes - mls wireless]

     Gabor,

     Thanks for the help!



     If someone else have another tip, I am all ears.


     Have a nice day!



Para contato ou solicitações utilize nosso canal de atendimento via 
Suporte Técnico através
de nossa central 24H via tel.:(21) 2538-8400 ou através do email: 
suporte at mls.com.br




Atenciosamente,

*João Tiago Braz*| Aux. Sistemas Operação
21 2538-8400 | 21 3923-5000
operacoes at mls.com.br




On 03/10/2020 07:32, Nagy Gábor wrote:
> Hi!
>
> unset() rewrite rule was introduced in version 3.8.
> https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edition/3.26/administration-guide/2#TOPIC-956389
> The strange error - Plugin module not found in 'module-path'; 
> module-path='/lib64/syslog-ng', module='rewrite' - can be seen because 
> unset() is not understood as a keyword in the configuration.
>
> My idea to reduce the size of the output log: you can use a template 
> to define what should be included in the output. Or you could 
> configure logrotate.
>
> Regards,
> Gabor
>
>
> operacoes - mls wireless <opertec at mls.com.br 
> <mailto:opertec at mls.com.br>> ezt írta (időpont: 2020. okt. 3., Szo, 0:23):
>
>     Hello there,
>
>     I am runing syslog-ng 3.2.5 on a centos 6.10 server, the log
>     server. Here we have 30 clients sending log via rsyslog to the log
>     server. At the log server each one of them have its own log
>     according to the host name. This operation works just fine. Now my
>     manager ask me to remove some parts of the log, so the final log
>     size will be smaller. At the log server I tried use rewrite and
>     unset to suppress some parts of the log but it does not work, with
>     the error : Plugin module not found in 'module-path';
>     module-path='/lib64/syslog-ng', module='rewrite'
>
>
>     This is the config on log server for each one of the clients.
>
>     filter f_client_serv01 { host( "client_serv01" ); };
>     destination d_client_serv01 { file("/var/log/client_serv01.log"
>     perm(0644) owner(root) group(root) ); };
>     log { source(s_net); filter(f_client_serv01);
>     destination(d_client_serv01); };
>
>
>     This is the log
>
>     Oct  2 19:07:04 client_serv01 kernel: IN=rdc1 OUT=
>     MAC=00:50:da:6f:0a:54:ec:08:6b:7f:d5:cb:08:00 SRC=10.1.16.35
>     DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=27903 DF
>     PROTO=TCP SPT=40917 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0
>
>
>     rewrite r_rewrite_unset{
>         unset(value("WINDOW"));
>     };
>
>
>     rewrite r_rewrite_subst{
>         subst("WINDOW", " ", value("MESSAGE"), flags("global"));
>     };
>
>
>
>     Does anyone have a tip to try to solve this?
>
>     Thanks for help.
>
>     Have a nice day!
>     -- 
>
>
>
>     Para contato ou solicitações utilize nosso canal de atendimento
>     via Suporte Técnico através
>     de nossa central 24H via tel.:(21) 2538-8400 ou através do email:
>     suporte at mls.com.br <mailto:suporte at mls.com.br>
>
>
>
>
>     Atenciosamente,
>
>     *João Tiago Braz*| Aux. Sistemas Operação
>     21 2538-8400 | 21 3923-5000
>     operacoes at mls.com.br <mailto:operacoes at mls.com.br>
>
>
>
>
>     ______________________________________________________________________________
>     Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>     Documentation:
>     http://www.balabit.com/support/documentation/?product=syslog-ng
>     FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20201005/a83b53c2/attachment.html>