Mailing List Archive

Lookup table does not set variable
Running rsyslog 8.24 on Debian9.

The lookup table
~# cat /etc/rsyslog.d/local/programnames.lookup
{ "version" : 1,
"nomatch" : "local-all",
"type" : "string",
"table" : [.
{"index" : "apache_site_access", "value" : "apache-site-access" },
{"index" : "apache_site_error", "value" : "apache-site-error" }
]}

does not set variable for DynaFile and all logs go to /var/log/.log

~# cat /etc/rsyslog.d/local/02-rulesets.conf
lookup_table(name="programname"
file="/etc/rsyslog.d/local/programnames.lookup")
set $.filedest = lookup("programname", $programname);
template(name="programnameFileStoreTemplate" type="string"
string="/var/log/%$.filedest%.log")

ruleset(name="ruleset-local"){
call ruleset-localstore
call ruleset-forwards-last
}

ruleset(name="ruleset-localstore"){
action(type="omfile" DynaFile="programnameFileStoreTemplate"
template="RSYSLOG_DebugFormat" asyncWriting="on" ioBufferSize="128K")
}

Any thoughts what could be wrong? Running debug does not show any errors.
Just variable not set.

Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801914690:imudp.c :
imudp: epoll_wait() returned with 1 fds
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801973745:imudp.c :
imudp: recvmmsg returned 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801991366:imudp.c :
recv(3,149),acl:1,msg:<13>1 2019-06-14T12:16:19.801660+02:00 HOST-LOCO
apache_site_access 29180 - [timeQuality tzKn
own="1" isSynced="1" syncAccuracy="990465"] test message
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802015589:imudp.c :
msg parser: flags 70, from '~NOTRESOLVED~', msg '<13>1
2019-06-14T12:16:19.801660+02:00 HOST-LOCO apache_site'
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802026839:imudp.c :
parse using parser list 0x55abe7d25090 (the default list).
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802041233:imudp.c :
Message has RFC5424/syslog-protocol format.
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802059418:imudp.c :
Parser 'rsyslog.rfc5424' returned 0
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802074210:imudp.c :
imudp: recvmmsg returned -1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802091320:imudp.c :
main Q: qqueueAdd: entry added, size now log 1, phys 1 entries
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802103168:imudp.c :
main Q:Reg: high activity - starting 1 additional worker thread(s).
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802241185:imudp.c :
main Q:Reg: started with state 0, num workers now 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802936660:7fd6c50ab700:
thread created, tid 29181, name 'rs:main Q:Reg'
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803136562:main Q:Reg/w0 :
wti 0x55abe7d40600: worker starting
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803157598:main Q:Reg/w0 :
DeleteProcessedBatch: we deleted 0 objects and enqueued 0 objects
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803167833:main Q:Reg/w0 :
doDeleteBatch: delete batch from store, new sizes: log 1, phys 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803180562:main Q:Reg/w0 :
processBATCH: batch of 1 elements must be processed
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803190204:main Q:Reg/w0 :
processBATCH: next msg 0: <13>1 2019-06-14T12:16:19.801660+02:00 HOST-LOCO
apache_site_access 29180 - [timeQuality
tzKnown="1" isSynced="1" syncAccuracy="
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803212631:main Q:Reg/w0 :
CALL [ruleset-forwards-first, queue:0]
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803239267:main Q:Reg/w0 :
CALL [ruleset-localstore, queue:0]
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803266139:main Q:Reg/w0 :
ACTION 0 [builtin:omfile:action(type="builtin:omfile" ...)]
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803293252:main Q:Reg/w0 :
executing action 0
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803304519:main Q:Reg/w0 :
action 'action 0': called, logging to builtin:omfile (susp 0/0, direct q 1)
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803338450:main Q:Reg/w0 :
dnscache: entry (nil) found
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807241319:imudp.c :
main Q: MultiEnqObj advised worker start
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807929989:main Q:Reg/w0 :
action 'action 0': is transactional - executing in commit phase
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807951211:main Q:Reg/w0 :
wti 0x55abe7d40600: we need to create a new action worker instance for
action 0
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807966193:main Q:Reg/w0 :
wti 0x55abe7d40600: created action worker instance 1 for action 0
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807978331:main Q:Reg/w0 :
Action 0 transitioned to state: itx
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807990882:main Q:Reg/w0 :
action 'action 0': set suspended state to 0
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808004265:main Q:Reg/w0 :
CALL [ruleset-forwards-last, queue:0]
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808037533:main Q:Reg/w0 :
END batch execution phase, entering to commit phase [processed 1 of 1
messages]
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808054503:main Q:Reg/w0 :
actionCommitAllDirect: action 0, state 1, nbr to commit 1 isTransactional 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808066618:main Q:Reg/w0 :
doTransaction: have commitTransaction IF, using that, pWrkrInfo
0x55abe7d31f60
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808079193:main Q:Reg/w0 :
entering actionCallCommitTransaction(), state: itx, actionNbr 0, nMsgs 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808091571:main Q:Reg/w0 :
omfile: file to log to: /var/log/.log
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808130391:main Q:Reg/w0 :
file stream .log params: flush interval 1, async write 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808253347:main Q:Reg/w0 :
Added new entry 0 for file cache, file '/var/log/.log'.
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808266376:main Q:Reg/w0 :
omfile: write to stream, pData->pStrm 0x7fd6b0002900, lenBuf 597, strt data
Debug line with all properties:
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: FROMHOST: 'localhost',
fromhost-ip: '127.0.0.1', HOSTNAME: 'HOST-LOCO', PRI: 13,
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: syslogtag 'apac
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808283223:main Q:Reg/w0 :
strm 0x7fd6b0002900: strmFlushinternal: file -1(.log) flush, buflen 597
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808295755:main Q:Reg/w0 :
strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at begin: iCnt 0,
iEnq 0, bFlushZip 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808306762:main Q:Reg/w0 :
strm 0x7fd6b0002900: doAsyncWriteInternal signaled notEmpty
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808316426:main Q:Reg/w0 :
strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at exit: iCnt 1,
iEnq 1, bFlushZip 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808326225:main Q:Reg/w0 :
Action 0 transitioned to state: rdy
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808335570:main Q:Reg/w0 :
actionCommit, action 0, in retry loop, iRet 0
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808344788:main Q:Reg/w0 :
processBATCH: batch of 1 elements has been processed
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808354529:main Q:Reg/w0 :
regular consumer finished, iret=0, szlog 0 sz phys 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808367045:main Q:Reg/w0 :
DeleteProcessedBatch: we deleted 1 objects and enqueued 0 objects
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808376870:main Q:Reg/w0 :
doDeleteBatch: delete batch from store, new sizes: log 0, phys 0
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808388314:main Q:Reg/w0 :
regular consumer finished, iret=4, szlog 0 sz phys 0
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808397521:main Q:Reg/w0 :
main Q:Reg/w0: worker IDLE, waiting for work.
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808444225:7fd6c48aa700:
thread created, tid 29182, name 'rs:.log'
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808459537:7fd6c48aa700:
strm 0x7fd6b0002900: file -1(.log) asyncWriterThread awoken, iCnt 1,
bTimedOut 0
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808468945:7fd6c48aa700:
strm 0x7fd6b0002900: file -1(.log) doWriteInternal: bFlush 1
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808478272:7fd6c48aa700:
strmPhysWrite, stream 0x7fd6b0002900, len 597
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808533012:7fd6c48aa700:
file '/var/log/.log' opened as #11 with mode 416
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808557535:7fd6c48aa700:
strm 0x7fd6b0002900: opened file '/var/log/.log' for WRITE as 11
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808600474:7fd6c48aa700:
strm 0x7fd6b0002900: file 11 write wrote 597 bytes
Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808612298:7fd6c48aa700:
strm 0x7fd6b0002900: file 11(/var/log/.log) asyncWriterThread new
iteration, iCnt 0, bTimedOut 0, iFlushInterval 1

Thank you.

--
Peter
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: Lookup table does not set variable [ In reply to ]
does this also happen with current 8.1905.0?
Rainer

El vie., 14 jun. 2019 a las 12:29, Peter Viskup via rsyslog
(<rsyslog@lists.adiscon.com>) escribió:
>
> Running rsyslog 8.24 on Debian9.
>
> The lookup table
> ~# cat /etc/rsyslog.d/local/programnames.lookup
> { "version" : 1,
> "nomatch" : "local-all",
> "type" : "string",
> "table" : [.
> {"index" : "apache_site_access", "value" : "apache-site-access" },
> {"index" : "apache_site_error", "value" : "apache-site-error" }
> ]}
>
> does not set variable for DynaFile and all logs go to /var/log/.log
>
> ~# cat /etc/rsyslog.d/local/02-rulesets.conf
> lookup_table(name="programname"
> file="/etc/rsyslog.d/local/programnames.lookup")
> set $.filedest = lookup("programname", $programname);
> template(name="programnameFileStoreTemplate" type="string"
> string="/var/log/%$.filedest%.log")
>
> ruleset(name="ruleset-local"){
> call ruleset-localstore
> call ruleset-forwards-last
> }
>
> ruleset(name="ruleset-localstore"){
> action(type="omfile" DynaFile="programnameFileStoreTemplate"
> template="RSYSLOG_DebugFormat" asyncWriting="on" ioBufferSize="128K")
> }
>
> Any thoughts what could be wrong? Running debug does not show any errors.
> Just variable not set.
>
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801914690:imudp.c :
> imudp: epoll_wait() returned with 1 fds
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801973745:imudp.c :
> imudp: recvmmsg returned 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801991366:imudp.c :
> recv(3,149),acl:1,msg:<13>1 2019-06-14T12:16:19.801660+02:00 HOST-LOCO
> apache_site_access 29180 - [timeQuality tzKn
> own="1" isSynced="1" syncAccuracy="990465"] test message
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802015589:imudp.c :
> msg parser: flags 70, from '~NOTRESOLVED~', msg '<13>1
> 2019-06-14T12:16:19.801660+02:00 HOST-LOCO apache_site'
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802026839:imudp.c :
> parse using parser list 0x55abe7d25090 (the default list).
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802041233:imudp.c :
> Message has RFC5424/syslog-protocol format.
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802059418:imudp.c :
> Parser 'rsyslog.rfc5424' returned 0
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802074210:imudp.c :
> imudp: recvmmsg returned -1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802091320:imudp.c :
> main Q: qqueueAdd: entry added, size now log 1, phys 1 entries
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802103168:imudp.c :
> main Q:Reg: high activity - starting 1 additional worker thread(s).
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802241185:imudp.c :
> main Q:Reg: started with state 0, num workers now 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802936660:7fd6c50ab700:
> thread created, tid 29181, name 'rs:main Q:Reg'
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803136562:main Q:Reg/w0 :
> wti 0x55abe7d40600: worker starting
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803157598:main Q:Reg/w0 :
> DeleteProcessedBatch: we deleted 0 objects and enqueued 0 objects
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803167833:main Q:Reg/w0 :
> doDeleteBatch: delete batch from store, new sizes: log 1, phys 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803180562:main Q:Reg/w0 :
> processBATCH: batch of 1 elements must be processed
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803190204:main Q:Reg/w0 :
> processBATCH: next msg 0: <13>1 2019-06-14T12:16:19.801660+02:00 HOST-LOCO
> apache_site_access 29180 - [.timeQuality
> tzKnown="1" isSynced="1" syncAccuracy="
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803212631:main Q:Reg/w0 :
> CALL [ruleset-forwards-first, queue:0]
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803239267:main Q:Reg/w0 :
> CALL [ruleset-localstore, queue:0]
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803266139:main Q:Reg/w0 :
> ACTION 0 [builtin:omfile:action(type="builtin:omfile" ...)]
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803293252:main Q:Reg/w0 :
> executing action 0
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803304519:main Q:Reg/w0 :
> action 'action 0': called, logging to builtin:omfile (susp 0/0, direct q 1)
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803338450:main Q:Reg/w0 :
> dnscache: entry (nil) found
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807241319:imudp.c :
> main Q: MultiEnqObj advised worker start
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807929989:main Q:Reg/w0 :
> action 'action 0': is transactional - executing in commit phase
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807951211:main Q:Reg/w0 :
> wti 0x55abe7d40600: we need to create a new action worker instance for
> action 0
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807966193:main Q:Reg/w0 :
> wti 0x55abe7d40600: created action worker instance 1 for action 0
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807978331:main Q:Reg/w0 :
> Action 0 transitioned to state: itx
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807990882:main Q:Reg/w0 :
> action 'action 0': set suspended state to 0
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808004265:main Q:Reg/w0 :
> CALL [ruleset-forwards-last, queue:0]
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808037533:main Q:Reg/w0 :
> END batch execution phase, entering to commit phase [processed 1 of 1
> messages]
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808054503:main Q:Reg/w0 :
> actionCommitAllDirect: action 0, state 1, nbr to commit 1 isTransactional 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808066618:main Q:Reg/w0 :
> doTransaction: have commitTransaction IF, using that, pWrkrInfo
> 0x55abe7d31f60
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808079193:main Q:Reg/w0 :
> entering actionCallCommitTransaction(), state: itx, actionNbr 0, nMsgs 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808091571:main Q:Reg/w0 :
> omfile: file to log to: /var/log/.log
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808130391:main Q:Reg/w0 :
> file stream .log params: flush interval 1, async write 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808253347:main Q:Reg/w0 :
> Added new entry 0 for file cache, file '/var/log/.log'.
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808266376:main Q:Reg/w0 :
> omfile: write to stream, pData->pStrm 0x7fd6b0002900, lenBuf 597, strt data
> Debug line with all properties:
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: FROMHOST: 'localhost',
> fromhost-ip: '127.0.0.1', HOSTNAME: 'HOST-LOCO', PRI: 13,
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: syslogtag 'apac
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808283223:main Q:Reg/w0 :
> strm 0x7fd6b0002900: strmFlushinternal: file -1(.log) flush, buflen 597
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808295755:main Q:Reg/w0 :
> strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at begin: iCnt 0,
> iEnq 0, bFlushZip 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808306762:main Q:Reg/w0 :
> strm 0x7fd6b0002900: doAsyncWriteInternal signaled notEmpty
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808316426:main Q:Reg/w0 :
> strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at exit: iCnt 1,
> iEnq 1, bFlushZip 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808326225:main Q:Reg/w0 :
> Action 0 transitioned to state: rdy
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808335570:main Q:Reg/w0 :
> actionCommit, action 0, in retry loop, iRet 0
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808344788:main Q:Reg/w0 :
> processBATCH: batch of 1 elements has been processed
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808354529:main Q:Reg/w0 :
> regular consumer finished, iret=0, szlog 0 sz phys 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808367045:main Q:Reg/w0 :
> DeleteProcessedBatch: we deleted 1 objects and enqueued 0 objects
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808376870:main Q:Reg/w0 :
> doDeleteBatch: delete batch from store, new sizes: log 0, phys 0
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808388314:main Q:Reg/w0 :
> regular consumer finished, iret=4, szlog 0 sz phys 0
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808397521:main Q:Reg/w0 :
> main Q:Reg/w0: worker IDLE, waiting for work.
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808444225:7fd6c48aa700:
> thread created, tid 29182, name 'rs:.log'
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808459537:7fd6c48aa700:
> strm 0x7fd6b0002900: file -1(.log) asyncWriterThread awoken, iCnt 1,
> bTimedOut 0
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808468945:7fd6c48aa700:
> strm 0x7fd6b0002900: file -1(.log) doWriteInternal: bFlush 1
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808478272:7fd6c48aa700:
> strmPhysWrite, stream 0x7fd6b0002900, len 597
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808533012:7fd6c48aa700:
> file '/var/log/.log' opened as #11 with mode 416
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808557535:7fd6c48aa700:
> strm 0x7fd6b0002900: opened file '/var/log/.log' for WRITE as 11
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808600474:7fd6c48aa700:
> strm 0x7fd6b0002900: file 11 write wrote 597 bytes
> Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808612298:7fd6c48aa700:
> strm 0x7fd6b0002900: file 11(/var/log/.log) asyncWriterThread new
> iteration, iCnt 0, bTimedOut 0, iFlushInterval 1
>
> Thank you.
>
> --
> Peter
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: Lookup table does not set variable [ In reply to ]
Can just confirm it is the same with 8.1901 from official Debian backports
repository.
Not able to confirm on 8.1904 version available in your OBS repositories as
it is not working in our chrooted environment by default.
Seeing errors like

Jun 14 13:25:56 HOST-LOCO rsyslogd: rsyslogd's groupid changed to 115
Jun 14 13:25:56 HOST-LOCO rsyslogd: rsyslogd's userid changed to 111
Jun 14 13:25:56 HOST-LOCO rsyslogd: [origin software="rsyslogd"
swVersion="8.1904.0" x-pid="15495" x-info="https://www.rsyslog.com"] start
Jun 14 13:26:11 HOST-LOCO rsyslogd[15495]: rsyslogd: impstats: error
reading /proc/15495/fd : No such file or directory [v8.1904.0]
Jun 14 13:26:11 HOST-LOCO rsyslogd: impstats: error reading /proc/15495/fd
: No such file or directory [v8.1904.0]
Jun 14 13:26:26 HOST-LOCO rsyslogd[15495]: rsyslogd: impstats: error
reading /proc/15495/fd : No such file or directory [v8.1904.0]
Jun 14 13:26:26 HOST-LOCO rsyslogd: impstats: error reading /proc/15495/fd
: No such file or directory [v8.1904.0]

and the systemd notify not working as with 8.24 and 8.1901 version.

Jun 14 13:27:26 HOST-LOCO systemd[1]: rsyslog-chroot@local.service: Start
operation timed out. Terminating.
Jun 14 13:27:26 HOST-LOCO rsyslogd: [origin software="rsyslogd"
swVersion="8.1904.0" x-pid="15495" x-info="https://www.rsyslog.com"]
exiting on signal 15.
Jun 14 13:27:26 HOST-LOCO rsyslogd[15495]: rsyslog internal message
(3,-3000): impstats: error reading /proc/15495/fd
Jun 14 13:27:26 HOST-LOCO rsyslogd[15495]: : No such file or directory
[v8.1904.0]
Jun 14 13:27:26 HOST-LOCO systemd[1]: Failed to start Syslog Service local
instance under /chroot/local.
Jun 14 13:27:26 HOST-LOCO systemd[1]: rsyslog-chroot@local.service: Unit
entered failed state.
Jun 14 13:27:26 HOST-LOCO systemd[1]: rsyslog-chroot@local.service: Failed
with result 'timeout'.

--
Peter

On Fri, Jun 14, 2019 at 1:09 PM Rainer Gerhards <rgerhards@hq.adiscon.com>
wrote:

> does this also happen with current 8.1905.0?
> Rainer
>
> El vie., 14 jun. 2019 a las 12:29, Peter Viskup via rsyslog
> (<rsyslog@lists.adiscon.com>) escribió:
> >
> > Running rsyslog 8.24 on Debian9.
> >
> > The lookup table
> > ~# cat /etc/rsyslog.d/local/programnames.lookup
> > { "version" : 1,
> > "nomatch" : "local-all",
> > "type" : "string",
> > "table" : [.
> > {"index" : "apache_site_access", "value" : "apache-site-access" },
> > {"index" : "apache_site_error", "value" : "apache-site-error" }
> > ]}
> >
> > does not set variable for DynaFile and all logs go to /var/log/.log
> >
> > ~# cat /etc/rsyslog.d/local/02-rulesets.conf
> > lookup_table(name="programname"
> > file="/etc/rsyslog.d/local/programnames.lookup")
> > set $.filedest = lookup("programname", $programname);
> > template(name="programnameFileStoreTemplate" type="string"
> > string="/var/log/%$.filedest%.log")
> >
> > ruleset(name="ruleset-local"){
> > call ruleset-localstore
> > call ruleset-forwards-last
> > }
> >
> > ruleset(name="ruleset-localstore"){
> > action(type="omfile" DynaFile="programnameFileStoreTemplate"
> > template="RSYSLOG_DebugFormat" asyncWriting="on" ioBufferSize="128K")
> > }
> >
> > Any thoughts what could be wrong? Running debug does not show any errors.
> > Just variable not set.
> >
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801914690:imudp.c
> :
> > imudp: epoll_wait() returned with 1 fds
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801973745:imudp.c
> :
> > imudp: recvmmsg returned 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801991366:imudp.c
> :
> > recv(3,149),acl:1,msg:<13>1 2019-06-14T12:16:19.801660+02:00 HOST-LOCO
> > apache_site_access 29180 - [timeQuality tzKn
> > own="1" isSynced="1" syncAccuracy="990465"] test message
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802015589:imudp.c
> :
> > msg parser: flags 70, from '~NOTRESOLVED~', msg '<13>1
> > 2019-06-14T12:16:19.801660+02:00 HOST-LOCO apache_site'
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802026839:imudp.c
> :
> > parse using parser list 0x55abe7d25090 (the default list).
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802041233:imudp.c
> :
> > Message has RFC5424/syslog-protocol format.
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802059418:imudp.c
> :
> > Parser 'rsyslog.rfc5424' returned 0
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802074210:imudp.c
> :
> > imudp: recvmmsg returned -1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802091320:imudp.c
> :
> > main Q: qqueueAdd: entry added, size now log 1, phys 1 entries
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802103168:imudp.c
> :
> > main Q:Reg: high activity - starting 1 additional worker thread(s).
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802241185:imudp.c
> :
> > main Q:Reg: started with state 0, num workers now 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802936660:7fd6c50ab700:
> > thread created, tid 29181, name 'rs:main Q:Reg'
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803136562:main Q:Reg/w0
> :
> > wti 0x55abe7d40600: worker starting
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803157598:main Q:Reg/w0
> :
> > DeleteProcessedBatch: we deleted 0 objects and enqueued 0 objects
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803167833:main Q:Reg/w0
> :
> > doDeleteBatch: delete batch from store, new sizes: log 1, phys 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803180562:main Q:Reg/w0
> :
> > processBATCH: batch of 1 elements must be processed
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803190204:main Q:Reg/w0
> :
> > processBATCH: next msg 0: <13>1 2019-06-14T12:16:19.801660+02:00
> HOST-LOCO
> > apache_site_access 29180 - [.timeQuality
> > tzKnown="1" isSynced="1" syncAccuracy="
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803212631:main Q:Reg/w0
> :
> > CALL [ruleset-forwards-first, queue:0]
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803239267:main Q:Reg/w0
> :
> > CALL [ruleset-localstore, queue:0]
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803266139:main Q:Reg/w0
> :
> > ACTION 0 [builtin:omfile:action(type="builtin:omfile" ...)]
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803293252:main Q:Reg/w0
> :
> > executing action 0
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803304519:main Q:Reg/w0
> :
> > action 'action 0': called, logging to builtin:omfile (susp 0/0, direct q
> 1)
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803338450:main Q:Reg/w0
> :
> > dnscache: entry (nil) found
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807241319:imudp.c
> :
> > main Q: MultiEnqObj advised worker start
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807929989:main Q:Reg/w0
> :
> > action 'action 0': is transactional - executing in commit phase
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807951211:main Q:Reg/w0
> :
> > wti 0x55abe7d40600: we need to create a new action worker instance for
> > action 0
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807966193:main Q:Reg/w0
> :
> > wti 0x55abe7d40600: created action worker instance 1 for action 0
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807978331:main Q:Reg/w0
> :
> > Action 0 transitioned to state: itx
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807990882:main Q:Reg/w0
> :
> > action 'action 0': set suspended state to 0
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808004265:main Q:Reg/w0
> :
> > CALL [ruleset-forwards-last, queue:0]
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808037533:main Q:Reg/w0
> :
> > END batch execution phase, entering to commit phase [processed 1 of 1
> > messages]
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808054503:main Q:Reg/w0
> :
> > actionCommitAllDirect: action 0, state 1, nbr to commit 1
> isTransactional 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808066618:main Q:Reg/w0
> :
> > doTransaction: have commitTransaction IF, using that, pWrkrInfo
> > 0x55abe7d31f60
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808079193:main Q:Reg/w0
> :
> > entering actionCallCommitTransaction(), state: itx, actionNbr 0, nMsgs 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808091571:main Q:Reg/w0
> :
> > omfile: file to log to: /var/log/.log
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808130391:main Q:Reg/w0
> :
> > file stream .log params: flush interval 1, async write 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808253347:main Q:Reg/w0
> :
> > Added new entry 0 for file cache, file '/var/log/.log'.
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808266376:main Q:Reg/w0
> :
> > omfile: write to stream, pData->pStrm 0x7fd6b0002900, lenBuf 597, strt
> data
> > Debug line with all properties:
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: FROMHOST: 'localhost',
> > fromhost-ip: '127.0.0.1', HOSTNAME: 'HOST-LOCO', PRI: 13,
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: syslogtag 'apac
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808283223:main Q:Reg/w0
> :
> > strm 0x7fd6b0002900: strmFlushinternal: file -1(.log) flush, buflen 597
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808295755:main Q:Reg/w0
> :
> > strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at begin: iCnt 0,
> > iEnq 0, bFlushZip 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808306762:main Q:Reg/w0
> :
> > strm 0x7fd6b0002900: doAsyncWriteInternal signaled notEmpty
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808316426:main Q:Reg/w0
> :
> > strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at exit: iCnt 1,
> > iEnq 1, bFlushZip 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808326225:main Q:Reg/w0
> :
> > Action 0 transitioned to state: rdy
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808335570:main Q:Reg/w0
> :
> > actionCommit, action 0, in retry loop, iRet 0
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808344788:main Q:Reg/w0
> :
> > processBATCH: batch of 1 elements has been processed
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808354529:main Q:Reg/w0
> :
> > regular consumer finished, iret=0, szlog 0 sz phys 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808367045:main Q:Reg/w0
> :
> > DeleteProcessedBatch: we deleted 1 objects and enqueued 0 objects
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808376870:main Q:Reg/w0
> :
> > doDeleteBatch: delete batch from store, new sizes: log 0, phys 0
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808388314:main Q:Reg/w0
> :
> > regular consumer finished, iret=4, szlog 0 sz phys 0
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808397521:main Q:Reg/w0
> :
> > main Q:Reg/w0: worker IDLE, waiting for work.
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808444225:7fd6c48aa700:
> > thread created, tid 29182, name 'rs:.log'
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808459537:7fd6c48aa700:
> > strm 0x7fd6b0002900: file -1(.log) asyncWriterThread awoken, iCnt 1,
> > bTimedOut 0
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808468945:7fd6c48aa700:
> > strm 0x7fd6b0002900: file -1(.log) doWriteInternal: bFlush 1
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808478272:7fd6c48aa700:
> > strmPhysWrite, stream 0x7fd6b0002900, len 597
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808533012:7fd6c48aa700:
> > file '/var/log/.log' opened as #11 with mode 416
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808557535:7fd6c48aa700:
> > strm 0x7fd6b0002900: opened file '/var/log/.log' for WRITE as 11
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808600474:7fd6c48aa700:
> > strm 0x7fd6b0002900: file 11 write wrote 597 bytes
> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808612298:7fd6c48aa700:
> > strm 0x7fd6b0002900: file 11(/var/log/.log) asyncWriterThread new
> > iteration, iCnt 0, bTimedOut 0, iFlushInterval 1
> >
> > Thank you.
> >
> > --
> > Peter
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: Lookup table does not set variable [ In reply to ]
I suggest to open a GitHub issues, as the code is most likely the same as
current. I can than see if the contributor steps in.

Rainer

Sent from phone, thus brief.

Peter Viskup <skupko.sk@gmail.com> schrieb am Fr., 14. Juni 2019, 13:37:

> Can just confirm it is the same with 8.1901 from official Debian backports
> repository.
> Not able to confirm on 8.1904 version available in your OBS repositories
> as it is not working in our chrooted environment by default.
> Seeing errors like
>
> Jun 14 13:25:56 HOST-LOCO rsyslogd: rsyslogd's groupid changed to 115
> Jun 14 13:25:56 HOST-LOCO rsyslogd: rsyslogd's userid changed to 111
> Jun 14 13:25:56 HOST-LOCO rsyslogd: [origin software="rsyslogd"
> swVersion="8.1904.0" x-pid="15495" x-info="https://www.rsyslog.com"] start
> Jun 14 13:26:11 HOST-LOCO rsyslogd[15495]: rsyslogd: impstats: error
> reading /proc/15495/fd : No such file or directory [v8.1904.0]
> Jun 14 13:26:11 HOST-LOCO rsyslogd: impstats: error reading /proc/15495/fd
> : No such file or directory [v8.1904.0]
> Jun 14 13:26:26 HOST-LOCO rsyslogd[15495]: rsyslogd: impstats: error
> reading /proc/15495/fd : No such file or directory [v8.1904.0]
> Jun 14 13:26:26 HOST-LOCO rsyslogd: impstats: error reading /proc/15495/fd
> : No such file or directory [v8.1904.0]
>
> and the systemd notify not working as with 8.24 and 8.1901 version.
>
> Jun 14 13:27:26 HOST-LOCO systemd[1]: rsyslog-chroot@local.service: Start
> operation timed out. Terminating.
> Jun 14 13:27:26 HOST-LOCO rsyslogd: [origin software="rsyslogd"
> swVersion="8.1904.0" x-pid="15495" x-info="https://www.rsyslog.com"]
> exiting on signal 15.
> Jun 14 13:27:26 HOST-LOCO rsyslogd[15495]: rsyslog internal message
> (3,-3000): impstats: error reading /proc/15495/fd
> Jun 14 13:27:26 HOST-LOCO rsyslogd[15495]: : No such file or directory
> [v8.1904.0]
> Jun 14 13:27:26 HOST-LOCO systemd[1]: Failed to start Syslog Service local
> instance under /chroot/local.
> Jun 14 13:27:26 HOST-LOCO systemd[1]: rsyslog-chroot@local.service: Unit
> entered failed state.
> Jun 14 13:27:26 HOST-LOCO systemd[1]: rsyslog-chroot@local.service:
> Failed with result 'timeout'.
>
> --
> Peter
>
> On Fri, Jun 14, 2019 at 1:09 PM Rainer Gerhards <rgerhards@hq.adiscon.com>
> wrote:
>
>> does this also happen with current 8.1905.0?
>> Rainer
>>
>> El vie., 14 jun. 2019 a las 12:29, Peter Viskup via rsyslog
>> (<rsyslog@lists.adiscon.com>) escribió:
>> >
>> > Running rsyslog 8.24 on Debian9.
>> >
>> > The lookup table
>> > ~# cat /etc/rsyslog.d/local/programnames.lookup
>> > { "version" : 1,
>> > "nomatch" : "local-all",
>> > "type" : "string",
>> > "table" : [.
>> > {"index" : "apache_site_access", "value" : "apache-site-access" },
>> > {"index" : "apache_site_error", "value" : "apache-site-error" }
>> > ]}
>> >
>> > does not set variable for DynaFile and all logs go to /var/log/.log
>> >
>> > ~# cat /etc/rsyslog.d/local/02-rulesets.conf
>> > lookup_table(name="programname"
>> > file="/etc/rsyslog.d/local/programnames.lookup")
>> > set $.filedest = lookup("programname", $programname);
>> > template(name="programnameFileStoreTemplate" type="string"
>> > string="/var/log/%$.filedest%.log")
>> >
>> > ruleset(name="ruleset-local"){
>> > call ruleset-localstore
>> > call ruleset-forwards-last
>> > }
>> >
>> > ruleset(name="ruleset-localstore"){
>> > action(type="omfile" DynaFile="programnameFileStoreTemplate"
>> > template="RSYSLOG_DebugFormat" asyncWriting="on" ioBufferSize="128K")
>> > }
>> >
>> > Any thoughts what could be wrong? Running debug does not show any
>> errors.
>> > Just variable not set.
>> >
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801914690:imudp.c
>> :
>> > imudp: epoll_wait() returned with 1 fds
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801973745:imudp.c
>> :
>> > imudp: recvmmsg returned 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801991366:imudp.c
>> :
>> > recv(3,149),acl:1,msg:<13>1 2019-06-14T12:16:19.801660+02:00 HOST-LOCO
>> > apache_site_access 29180 - [timeQuality tzKn
>> > own="1" isSynced="1" syncAccuracy="990465"] test message
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802015589:imudp.c
>> :
>> > msg parser: flags 70, from '~NOTRESOLVED~', msg '<13>1
>> > 2019-06-14T12:16:19.801660+02:00 HOST-LOCO apache_site'
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802026839:imudp.c
>> :
>> > parse using parser list 0x55abe7d25090 (the default list).
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802041233:imudp.c
>> :
>> > Message has RFC5424/syslog-protocol format.
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802059418:imudp.c
>> :
>> > Parser 'rsyslog.rfc5424' returned 0
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802074210:imudp.c
>> :
>> > imudp: recvmmsg returned -1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802091320:imudp.c
>> :
>> > main Q: qqueueAdd: entry added, size now log 1, phys 1 entries
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802103168:imudp.c
>> :
>> > main Q:Reg: high activity - starting 1 additional worker thread(s).
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802241185:imudp.c
>> :
>> > main Q:Reg: started with state 0, num workers now 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802936660:7fd6c50ab700:
>> > thread created, tid 29181, name 'rs:main Q:Reg'
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803136562:main
>> Q:Reg/w0 :
>> > wti 0x55abe7d40600: worker starting
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803157598:main
>> Q:Reg/w0 :
>> > DeleteProcessedBatch: we deleted 0 objects and enqueued 0 objects
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803167833:main
>> Q:Reg/w0 :
>> > doDeleteBatch: delete batch from store, new sizes: log 1, phys 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803180562:main
>> Q:Reg/w0 :
>> > processBATCH: batch of 1 elements must be processed
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803190204:main
>> Q:Reg/w0 :
>> > processBATCH: next msg 0: <13>1 2019-06-14T12:16:19.801660+02:00
>> HOST-LOCO
>> > apache_site_access 29180 - [.timeQuality
>> > tzKnown="1" isSynced="1" syncAccuracy="
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803212631:main
>> Q:Reg/w0 :
>> > CALL [ruleset-forwards-first, queue:0]
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803239267:main
>> Q:Reg/w0 :
>> > CALL [ruleset-localstore, queue:0]
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803266139:main
>> Q:Reg/w0 :
>> > ACTION 0 [builtin:omfile:action(type="builtin:omfile" ...)]
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803293252:main
>> Q:Reg/w0 :
>> > executing action 0
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803304519:main
>> Q:Reg/w0 :
>> > action 'action 0': called, logging to builtin:omfile (susp 0/0, direct
>> q 1)
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803338450:main
>> Q:Reg/w0 :
>> > dnscache: entry (nil) found
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807241319:imudp.c
>> :
>> > main Q: MultiEnqObj advised worker start
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807929989:main
>> Q:Reg/w0 :
>> > action 'action 0': is transactional - executing in commit phase
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807951211:main
>> Q:Reg/w0 :
>> > wti 0x55abe7d40600: we need to create a new action worker instance for
>> > action 0
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807966193:main
>> Q:Reg/w0 :
>> > wti 0x55abe7d40600: created action worker instance 1 for action 0
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807978331:main
>> Q:Reg/w0 :
>> > Action 0 transitioned to state: itx
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807990882:main
>> Q:Reg/w0 :
>> > action 'action 0': set suspended state to 0
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808004265:main
>> Q:Reg/w0 :
>> > CALL [ruleset-forwards-last, queue:0]
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808037533:main
>> Q:Reg/w0 :
>> > END batch execution phase, entering to commit phase [processed 1 of 1
>> > messages]
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808054503:main
>> Q:Reg/w0 :
>> > actionCommitAllDirect: action 0, state 1, nbr to commit 1
>> isTransactional 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808066618:main
>> Q:Reg/w0 :
>> > doTransaction: have commitTransaction IF, using that, pWrkrInfo
>> > 0x55abe7d31f60
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808079193:main
>> Q:Reg/w0 :
>> > entering actionCallCommitTransaction(), state: itx, actionNbr 0, nMsgs 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808091571:main
>> Q:Reg/w0 :
>> > omfile: file to log to: /var/log/.log
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808130391:main
>> Q:Reg/w0 :
>> > file stream .log params: flush interval 1, async write 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808253347:main
>> Q:Reg/w0 :
>> > Added new entry 0 for file cache, file '/var/log/.log'.
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808266376:main
>> Q:Reg/w0 :
>> > omfile: write to stream, pData->pStrm 0x7fd6b0002900, lenBuf 597, strt
>> data
>> > Debug line with all properties:
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: FROMHOST: 'localhost',
>> > fromhost-ip: '127.0.0.1', HOSTNAME: 'HOST-LOCO', PRI: 13,
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: syslogtag 'apac
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808283223:main
>> Q:Reg/w0 :
>> > strm 0x7fd6b0002900: strmFlushinternal: file -1(.log) flush, buflen 597
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808295755:main
>> Q:Reg/w0 :
>> > strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at begin: iCnt
>> 0,
>> > iEnq 0, bFlushZip 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808306762:main
>> Q:Reg/w0 :
>> > strm 0x7fd6b0002900: doAsyncWriteInternal signaled notEmpty
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808316426:main
>> Q:Reg/w0 :
>> > strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at exit: iCnt 1,
>> > iEnq 1, bFlushZip 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808326225:main
>> Q:Reg/w0 :
>> > Action 0 transitioned to state: rdy
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808335570:main
>> Q:Reg/w0 :
>> > actionCommit, action 0, in retry loop, iRet 0
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808344788:main
>> Q:Reg/w0 :
>> > processBATCH: batch of 1 elements has been processed
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808354529:main
>> Q:Reg/w0 :
>> > regular consumer finished, iret=0, szlog 0 sz phys 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808367045:main
>> Q:Reg/w0 :
>> > DeleteProcessedBatch: we deleted 1 objects and enqueued 0 objects
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808376870:main
>> Q:Reg/w0 :
>> > doDeleteBatch: delete batch from store, new sizes: log 0, phys 0
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808388314:main
>> Q:Reg/w0 :
>> > regular consumer finished, iret=4, szlog 0 sz phys 0
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808397521:main
>> Q:Reg/w0 :
>> > main Q:Reg/w0: worker IDLE, waiting for work.
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808444225:7fd6c48aa700:
>> > thread created, tid 29182, name 'rs:.log'
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808459537:7fd6c48aa700:
>> > strm 0x7fd6b0002900: file -1(.log) asyncWriterThread awoken, iCnt 1,
>> > bTimedOut 0
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808468945:7fd6c48aa700:
>> > strm 0x7fd6b0002900: file -1(.log) doWriteInternal: bFlush 1
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808478272:7fd6c48aa700:
>> > strmPhysWrite, stream 0x7fd6b0002900, len 597
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808533012:7fd6c48aa700:
>> > file '/var/log/.log' opened as #11 with mode 416
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808557535:7fd6c48aa700:
>> > strm 0x7fd6b0002900: opened file '/var/log/.log' for WRITE as 11
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808600474:7fd6c48aa700:
>> > strm 0x7fd6b0002900: file 11 write wrote 597 bytes
>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808612298:7fd6c48aa700:
>> > strm 0x7fd6b0002900: file 11(/var/log/.log) asyncWriterThread new
>> > iteration, iCnt 0, bTimedOut 0, iFlushInterval 1
>> >
>> > Thank you.
>> >
>> > --
>> > Peter
>> > _______________________________________________
>> > rsyslog mailing list
>> > http://lists.adiscon.net/mailman/listinfo/rsyslog
>> > http://www.rsyslog.com/professional-services/
>> > What's up with rsyslog? Follow https://twitter.com/rgerhards
>> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
>> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if
>> you DON'T LIKE THAT.
>>
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: Lookup table does not set variable [ In reply to ]
Opened https://github.com/rsyslog/rsyslog/issues/3706

On Fri, Jun 14, 2019 at 2:08 PM Rainer Gerhards <rgerhards@hq.adiscon.com>
wrote:

> I suggest to open a GitHub issues, as the code is most likely the same as
> current. I can than see if the contributor steps in.
>
> Rainer
>
> Sent from phone, thus brief.
>
> Peter Viskup <skupko.sk@gmail.com> schrieb am Fr., 14. Juni 2019, 13:37:
>
>> Can just confirm it is the same with 8.1901 from official Debian
>> backports repository.
>> Not able to confirm on 8.1904 version available in your OBS repositories
>> as it is not working in our chrooted environment by default.
>> Seeing errors like
>>
>> Jun 14 13:25:56 HOST-LOCO rsyslogd: rsyslogd's groupid changed to 115
>> Jun 14 13:25:56 HOST-LOCO rsyslogd: rsyslogd's userid changed to 111
>> Jun 14 13:25:56 HOST-LOCO rsyslogd: [origin software="rsyslogd"
>> swVersion="8.1904.0" x-pid="15495" x-info="https://www.rsyslog.com"]
>> start
>> Jun 14 13:26:11 HOST-LOCO rsyslogd[15495]: rsyslogd: impstats: error
>> reading /proc/15495/fd : No such file or directory [v8.1904.0]
>> Jun 14 13:26:11 HOST-LOCO rsyslogd: impstats: error reading
>> /proc/15495/fd : No such file or directory [v8.1904.0]
>> Jun 14 13:26:26 HOST-LOCO rsyslogd[15495]: rsyslogd: impstats: error
>> reading /proc/15495/fd : No such file or directory [v8.1904.0]
>> Jun 14 13:26:26 HOST-LOCO rsyslogd: impstats: error reading
>> /proc/15495/fd : No such file or directory [v8.1904.0]
>>
>> and the systemd notify not working as with 8.24 and 8.1901 version.
>>
>> Jun 14 13:27:26 HOST-LOCO systemd[1]: rsyslog-chroot@local.service:
>> Start operation timed out. Terminating.
>> Jun 14 13:27:26 HOST-LOCO rsyslogd: [origin software="rsyslogd"
>> swVersion="8.1904.0" x-pid="15495" x-info="https://www.rsyslog.com"]
>> exiting on signal 15.
>> Jun 14 13:27:26 HOST-LOCO rsyslogd[15495]: rsyslog internal message
>> (3,-3000): impstats: error reading /proc/15495/fd
>> Jun 14 13:27:26 HOST-LOCO rsyslogd[15495]: : No such file or directory
>> [v8.1904.0]
>> Jun 14 13:27:26 HOST-LOCO systemd[1]: Failed to start Syslog Service
>> local instance under /chroot/local.
>> Jun 14 13:27:26 HOST-LOCO systemd[1]: rsyslog-chroot@local.service: Unit
>> entered failed state.
>> Jun 14 13:27:26 HOST-LOCO systemd[1]: rsyslog-chroot@local.service:
>> Failed with result 'timeout'.
>>
>> --
>> Peter
>>
>> On Fri, Jun 14, 2019 at 1:09 PM Rainer Gerhards <rgerhards@hq.adiscon.com>
>> wrote:
>>
>>> does this also happen with current 8.1905.0?
>>> Rainer
>>>
>>> El vie., 14 jun. 2019 a las 12:29, Peter Viskup via rsyslog
>>> (<rsyslog@lists.adiscon.com>) escribió:
>>> >
>>> > Running rsyslog 8.24 on Debian9.
>>> >
>>> > The lookup table
>>> > ~# cat /etc/rsyslog.d/local/programnames.lookup
>>> > { "version" : 1,
>>> > "nomatch" : "local-all",
>>> > "type" : "string",
>>> > "table" : [.
>>> > {"index" : "apache_site_access", "value" : "apache-site-access" },
>>> > {"index" : "apache_site_error", "value" : "apache-site-error" }
>>> > ]}
>>> >
>>> > does not set variable for DynaFile and all logs go to /var/log/.log
>>> >
>>> > ~# cat /etc/rsyslog.d/local/02-rulesets.conf
>>> > lookup_table(name="programname"
>>> > file="/etc/rsyslog.d/local/programnames.lookup")
>>> > set $.filedest = lookup("programname", $programname);
>>> > template(name="programnameFileStoreTemplate" type="string"
>>> > string="/var/log/%$.filedest%.log")
>>> >
>>> > ruleset(name="ruleset-local"){
>>> > call ruleset-localstore
>>> > call ruleset-forwards-last
>>> > }
>>> >
>>> > ruleset(name="ruleset-localstore"){
>>> > action(type="omfile" DynaFile="programnameFileStoreTemplate"
>>> > template="RSYSLOG_DebugFormat" asyncWriting="on" ioBufferSize="128K")
>>> > }
>>> >
>>> > Any thoughts what could be wrong? Running debug does not show any
>>> errors.
>>> > Just variable not set.
>>> >
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801914690:imudp.c
>>> :
>>> > imudp: epoll_wait() returned with 1 fds
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801973745:imudp.c
>>> :
>>> > imudp: recvmmsg returned 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.801991366:imudp.c
>>> :
>>> > recv(3,149),acl:1,msg:<13>1 2019-06-14T12:16:19.801660+02:00 HOST-LOCO
>>> > apache_site_access 29180 - [timeQuality tzKn
>>> > own="1" isSynced="1" syncAccuracy="990465"] test message
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802015589:imudp.c
>>> :
>>> > msg parser: flags 70, from '~NOTRESOLVED~', msg '<13>1
>>> > 2019-06-14T12:16:19.801660+02:00 HOST-LOCO apache_site'
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802026839:imudp.c
>>> :
>>> > parse using parser list 0x55abe7d25090 (the default list).
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802041233:imudp.c
>>> :
>>> > Message has RFC5424/syslog-protocol format.
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802059418:imudp.c
>>> :
>>> > Parser 'rsyslog.rfc5424' returned 0
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802074210:imudp.c
>>> :
>>> > imudp: recvmmsg returned -1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802091320:imudp.c
>>> :
>>> > main Q: qqueueAdd: entry added, size now log 1, phys 1 entries
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802103168:imudp.c
>>> :
>>> > main Q:Reg: high activity - starting 1 additional worker thread(s).
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802241185:imudp.c
>>> :
>>> > main Q:Reg: started with state 0, num workers now 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.802936660:7fd6c50ab700:
>>> > thread created, tid 29181, name 'rs:main Q:Reg'
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803136562:main
>>> Q:Reg/w0 :
>>> > wti 0x55abe7d40600: worker starting
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803157598:main
>>> Q:Reg/w0 :
>>> > DeleteProcessedBatch: we deleted 0 objects and enqueued 0 objects
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803167833:main
>>> Q:Reg/w0 :
>>> > doDeleteBatch: delete batch from store, new sizes: log 1, phys 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803180562:main
>>> Q:Reg/w0 :
>>> > processBATCH: batch of 1 elements must be processed
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803190204:main
>>> Q:Reg/w0 :
>>> > processBATCH: next msg 0: <13>1 2019-06-14T12:16:19.801660+02:00
>>> HOST-LOCO
>>> > apache_site_access 29180 - [.timeQuality
>>> > tzKnown="1" isSynced="1" syncAccuracy="
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803212631:main
>>> Q:Reg/w0 :
>>> > CALL [ruleset-forwards-first, queue:0]
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803239267:main
>>> Q:Reg/w0 :
>>> > CALL [ruleset-localstore, queue:0]
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803266139:main
>>> Q:Reg/w0 :
>>> > ACTION 0 [builtin:omfile:action(type="builtin:omfile" ...)]
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803293252:main
>>> Q:Reg/w0 :
>>> > executing action 0
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803304519:main
>>> Q:Reg/w0 :
>>> > action 'action 0': called, logging to builtin:omfile (susp 0/0, direct
>>> q 1)
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.803338450:main
>>> Q:Reg/w0 :
>>> > dnscache: entry (nil) found
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807241319:imudp.c
>>> :
>>> > main Q: MultiEnqObj advised worker start
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807929989:main
>>> Q:Reg/w0 :
>>> > action 'action 0': is transactional - executing in commit phase
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807951211:main
>>> Q:Reg/w0 :
>>> > wti 0x55abe7d40600: we need to create a new action worker instance for
>>> > action 0
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807966193:main
>>> Q:Reg/w0 :
>>> > wti 0x55abe7d40600: created action worker instance 1 for action 0
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807978331:main
>>> Q:Reg/w0 :
>>> > Action 0 transitioned to state: itx
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.807990882:main
>>> Q:Reg/w0 :
>>> > action 'action 0': set suspended state to 0
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808004265:main
>>> Q:Reg/w0 :
>>> > CALL [ruleset-forwards-last, queue:0]
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808037533:main
>>> Q:Reg/w0 :
>>> > END batch execution phase, entering to commit phase [processed 1 of 1
>>> > messages]
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808054503:main
>>> Q:Reg/w0 :
>>> > actionCommitAllDirect: action 0, state 1, nbr to commit 1
>>> isTransactional 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808066618:main
>>> Q:Reg/w0 :
>>> > doTransaction: have commitTransaction IF, using that, pWrkrInfo
>>> > 0x55abe7d31f60
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808079193:main
>>> Q:Reg/w0 :
>>> > entering actionCallCommitTransaction(), state: itx, actionNbr 0, nMsgs
>>> 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808091571:main
>>> Q:Reg/w0 :
>>> > omfile: file to log to: /var/log/.log
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808130391:main
>>> Q:Reg/w0 :
>>> > file stream .log params: flush interval 1, async write 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808253347:main
>>> Q:Reg/w0 :
>>> > Added new entry 0 for file cache, file '/var/log/.log'.
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808266376:main
>>> Q:Reg/w0 :
>>> > omfile: write to stream, pData->pStrm 0x7fd6b0002900, lenBuf 597, strt
>>> data
>>> > Debug line with all properties:
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: FROMHOST: 'localhost',
>>> > fromhost-ip: '127.0.0.1', HOSTNAME: 'HOST-LOCO', PRI: 13,
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: syslogtag 'apac
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808283223:main
>>> Q:Reg/w0 :
>>> > strm 0x7fd6b0002900: strmFlushinternal: file -1(.log) flush, buflen 597
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808295755:main
>>> Q:Reg/w0 :
>>> > strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at begin: iCnt
>>> 0,
>>> > iEnq 0, bFlushZip 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808306762:main
>>> Q:Reg/w0 :
>>> > strm 0x7fd6b0002900: doAsyncWriteInternal signaled notEmpty
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808316426:main
>>> Q:Reg/w0 :
>>> > strm 0x7fd6b0002900: file -1(.log) doAsyncWriteInternal at exit: iCnt
>>> 1,
>>> > iEnq 1, bFlushZip 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808326225:main
>>> Q:Reg/w0 :
>>> > Action 0 transitioned to state: rdy
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808335570:main
>>> Q:Reg/w0 :
>>> > actionCommit, action 0, in retry loop, iRet 0
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808344788:main
>>> Q:Reg/w0 :
>>> > processBATCH: batch of 1 elements has been processed
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808354529:main
>>> Q:Reg/w0 :
>>> > regular consumer finished, iret=0, szlog 0 sz phys 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808367045:main
>>> Q:Reg/w0 :
>>> > DeleteProcessedBatch: we deleted 1 objects and enqueued 0 objects
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808376870:main
>>> Q:Reg/w0 :
>>> > doDeleteBatch: delete batch from store, new sizes: log 0, phys 0
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808388314:main
>>> Q:Reg/w0 :
>>> > regular consumer finished, iret=4, szlog 0 sz phys 0
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808397521:main
>>> Q:Reg/w0 :
>>> > main Q:Reg/w0: worker IDLE, waiting for work.
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808444225:7fd6c48aa700:
>>> > thread created, tid 29182, name 'rs:.log'
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808459537:7fd6c48aa700:
>>> > strm 0x7fd6b0002900: file -1(.log) asyncWriterThread awoken, iCnt 1,
>>> > bTimedOut 0
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808468945:7fd6c48aa700:
>>> > strm 0x7fd6b0002900: file -1(.log) doWriteInternal: bFlush 1
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808478272:7fd6c48aa700:
>>> > strmPhysWrite, stream 0x7fd6b0002900, len 597
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808533012:7fd6c48aa700:
>>> > file '/var/log/.log' opened as #11 with mode 416
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808557535:7fd6c48aa700:
>>> > strm 0x7fd6b0002900: opened file '/var/log/.log' for WRITE as 11
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808600474:7fd6c48aa700:
>>> > strm 0x7fd6b0002900: file 11 write wrote 597 bytes
>>> > Jun 14 12:16:19 HOST-LOCO rsyslogd[29154]: 7379.808612298:7fd6c48aa700:
>>> > strm 0x7fd6b0002900: file 11(/var/log/.log) asyncWriterThread new
>>> > iteration, iCnt 0, bTimedOut 0, iFlushInterval 1
>>> >
>>> > Thank you.
>>> >
>>> > --
>>> > Peter
>>> > _______________________________________________
>>> > rsyslog mailing list
>>> > http://lists.adiscon.net/mailman/listinfo/rsyslog
>>> > http://www.rsyslog.com/professional-services/
>>> > What's up with rsyslog? Follow https://twitter.com/rgerhards
>>> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
>>> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if
>>> you DON'T LIKE THAT.
>>>
>>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.