On Tue, Oct 29, 2013 at 4:33 PM, Mike Burger <mburger@xxxxxxxxxxxxxxxxx> wrote:
>> On Tue, Oct 29, 2013 at 2:08 PM, Mike Burger <mburger@xxxxxxxxxxxxxxxxx>
>> wrote:
>>>> centos 6.4, setup to be syslog server. Doing remote syslog using tcp
>>>> works fine, so now want to add relp. I installed the rsyslog-relp
>>>> package and told rsyslog.conf to use it:
>>>>
>>>> # RELP Syslog Server:
>>>> $ModLoad imrelp # provides RELP syslog reception
>>>> $InputRELPServerRun 20514
>>>>
>>>> when I restart rsyslog I am told it does not like my InputRELPServerRun
>>>> line:
>>>>
>>>> Oct 28 13:43:54 scan rsyslogd: [origin software="rsyslogd"
>>>> swVersion="5.8.10" x-pid="7102" x-info="http://www.rsyslog.com";] start
>>>> Oct 28 13:43:54 scan rsyslogd: the last error occured in
>>>> /etc/rsyslog.conf, line 23:"$InputRELPServerRun 20514"
>>>>
>>>> Any clues?
>>>
>>> Dumb question...do you have librelp installed?
>>>
>> Never a dumb question! I've done that way too many times. The
>> rsyslog-relp Should have installed it. Just to be sure, I went and
>> looked for /lib64/rsyslog/imrelp.so:
>>
>> [root@scan ~]# ls -lh /lib64/rsyslog/imrelp.so
>> -rwxr-xr-x. 1 root root 11K Sep 9 09:58 /lib64/rsyslog/imrelp.so
>> [root@scan ~]#
>>
>
> Looking at http://www.rsyslog.com/doc/imrelp.html, I see two possible
> configuration options. The option you're using:
>
> $ModLoad imrelp # needs to be done just once
> $InputRELPServerRun 20514
>
> has some sort of note about being available in rsyslog 6.3.6+.
>
> Since CentOS 6.4 comes with version 5.8.10-7, perhaps try using the other
> listed option, instead:
>
> module(load="imrelp") # needs to be done just once
> input(type="imrelp" port="20514")
>
Really? I thought it was the other way around, since the config
I am using is under "Legacy Configuration Directives:". After all,
this
# Provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514
works without any issues. But, let's try it anyway:
# RELP Syslog Server:
# $ModLoad imrelp # provides RELP syslog reception
# start a RELP syslog server at port 20514
# $InputRELPServerRun 20514
module(load="imrelp") # needs to be done just once
input(type="imrelp" port="20514")
It seems not to like it
Oct 31 17:23:43 scan kernel: imklog 5.8.10, log source = /proc/kmsg started.
Oct 31 17:23:43 scan rsyslogd: [origin software="rsyslogd"
swVersion="5.8.10" x-pid="8252" x-info="http://www.rsyslog.com";] start
Oct 31 17:23:43 scan rsyslogd-3000: unknown priority name "" [try
http://www.rsyslog.com/e/3000 ]
Oct 31 17:23:43 scan rsyslogd: the last error occured in
/etc/rsyslog.conf, line 24:"module(load="imrelp") # needs to be done
just once"
Oct 31 17:23:43 scan rsyslogd: warning: selector line without actions
will be discarded
Oct 31 17:23:43 scan rsyslogd-3000: unknown priority name "" [try
http://www.rsyslog.com/e/3000 ]
Oct 31 17:23:43 scan rsyslogd: the last error occured in
/etc/rsyslog.conf, line 25:"input(type="imrelp" port="20514")"
Oct 31 17:23:43 scan rsyslogd: warning: selector line without actions
will be discarded
Oct 31 17:23:43 scan rsyslogd-2124: CONFIG ERROR: could not interpret
master config file '/etc/rsyslog.conf'. [try
http://www.rsyslog.com/e/2124 ]
> --
> Mike Burger
> http://www.bubbanfriends.org
>
> "It's always suicide-mission this, save-the-planet that. No one ever just
> stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1
>
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
