Mailing List Archive

Dropping only info messages
I have this configuration file[0] in /etc/rsyslog.d/, generating this
log[1]. The last statement & ~ drops the messages.

How can only drop the .info messages and make sure warning and errors
continue to be processed in the remaining of the rsyslogd.conf?


[0]
if ($programname == 'mesos-slave') or ($programname == 'marathon') \
then -/var/log/mesos.log & ~

[1]
Jul 31 12:51:11 m01 marathon: [2019-07-31 12:51:11,773] WARN Killing
known task [server.0a6ab619-b23f-11e9-be5a-0050563001a1] of instance
instance [server.marathon) Jul 31 12:51:27 m03 mesos-slave[4368]: I0731
12:51:27.885895 4398 slave.cpp:7161] Current disk usage 26.79%. Max
allowed age: 4.424486483391273days Jul 31 12:51:48 c04
mesos-slave[1411598]: I0731 12:51:48.971586 1411633 slave.cpp:6860]
Current disk usage 11.15%. Max allowed age: 5.519823894437384days Jul 31
12:52:11 c04 mesos-slave[1411598]: I0731 12:52:11.764261 1411627
slave.cpp:3630] Asked to kill task
server.0a6ab619-b23f-11e9-be5a-0050563001a1 of framework 0 Jul 31
12:52:11 m01 marathon: [2019-07-31 12:52:11,763] WARN No kill ack
received for instance
[server.marathon-0a6ab619-b23f-11e9-be5a-0050563001a1], retrying (24)
Jul 31 12:52:11 m01 marathon: [2019-07-31 12:52:11,763] WARN Killing
known task [server.0a6ab619-b23f-11e9-be5a-0050563001a1] of instance
instance [server.marathon) Jul 31 12:52:26 c04 mesos-slave[1411598]:
W0731 12:52:26.247673 1411658 process.cpp:1890] Failed to send
'mesos.internal.KillTaskMessage' to '192.168.122.140:33137't Jul 31
12:52:27 m03 mesos-slave[4368]: I0731 12:52:27.886598 4401
slave.cpp:7161] Current disk usage 26.79%. Max allowed age:
4.424486483391273days Jul 31 12:52:48 c04 mesos-slave[1411598]: I0731
12:52:48.972520 1411657 slave.cpp:6860] Current disk usage 11.15%. Max
allowed age: 5.519680739035937days

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: Dropping only info messages [ In reply to ]
Something like this? (does not work)

if ($programname == 'mesos-slave') or ($programname == 'marathon') \
then -/var/log/mesos.log
& if ($syslogseverity <= 6 ) then ~



-----Original Message-----
To: rsyslog@lists.adiscon.com
Subject: Dropping only info messages


I have this configuration file[0] in /etc/rsyslog.d/, generating this
log[1]. The last statement & ~ drops the messages.

How can only drop the .info messages and make sure warning and errors
continue to be processed in the remaining of the rsyslogd.conf?


[0]
if ($programname == 'mesos-slave') or ($programname == 'marathon') \
then -/var/log/mesos.log
& ~

[1]
Jul 31 12:51:11 m01 marathon: [2019-07-31 12:51:11,773] WARN Killing
known task [server.0a6ab619-b23f-11e9-be5a-0050563001a1] of instance
instance [server.marathon)
Jul 31 12:51:27 m03 mesos-slave[4368]: I0731 12:51:27.885895 4398
slave.cpp:7161] Current disk usage 26.79%. Max allowed age:
4.424486483391273days
Jul 31 12:51:48 c04 mesos-slave[1411598]: I0731 12:51:48.971586 1411633
slave.cpp:6860] Current disk usage 11.15%. Max allowed age:
5.519823894437384days
Jul 31 12:52:11 c04 mesos-slave[1411598]: I0731 12:52:11.764261 1411627
slave.cpp:3630] Asked to kill task
server.0a6ab619-b23f-11e9-be5a-0050563001a1 of framework 0
Jul 31 12:52:11 m01 marathon: [2019-07-31 12:52:11,763] WARN No kill
ack received for instance
[server.marathon-0a6ab619-b23f-11e9-be5a-0050563001a1], retrying (24)
Jul 31 12:52:11 m01 marathon: [2019-07-31 12:52:11,763] WARN Killing
known task [server.0a6ab619-b23f-11e9-be5a-0050563001a1] of instance
instance [server.marathon)
Jul 31 12:52:26 c04 mesos-slave[1411598]: W0731 12:52:26.247673 1411658
process.cpp:1890] Failed to send 'mesos.internal.KillTaskMessage' to
'192.168.122.140:33137't
Jul 31 12:52:27 m03 mesos-slave[4368]: I0731 12:52:27.886598 4401
slave.cpp:7161] Current disk usage 26.79%. Max allowed age:
4.424486483391273days
Jul 31 12:52:48 c04 mesos-slave[1411598]: I0731 12:52:48.972520 1411657
slave.cpp:6860] Current disk usage 11.15%. Max allowed age:
5.519680739035937days

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: Dropping only info messages [ In reply to ]
This is also not working

if ($programname == 'mesos-slave') or ($programname == 'marathon') \
then {
*.* -/var/log/mesos.log
*.info ~
}



-----Original Message-----
Subject: Re: [rsyslog] Dropping only info messages


Something like this? (does not work)

if ($programname == 'mesos-slave') or ($programname == 'marathon') \
then -/var/log/mesos.log
& if ($syslogseverity <= 6 ) then ~



-----Original Message-----
To: rsyslog@lists.adiscon.com
Subject: Dropping only info messages


I have this configuration file[0] in /etc/rsyslog.d/, generating this
log[1]. The last statement & ~ drops the messages.

How can only drop the .info messages and make sure warning and errors
continue to be processed in the remaining of the rsyslogd.conf?


[0]
if ($programname == 'mesos-slave') or ($programname == 'marathon') \
then -/var/log/mesos.log
& ~

[1]
Jul 31 12:51:11 m01 marathon: [2019-07-31 12:51:11,773] WARN Killing
known task [server.0a6ab619-b23f-11e9-be5a-0050563001a1] of instance
instance [server.marathon)
Jul 31 12:51:27 m03 mesos-slave[4368]: I0731 12:51:27.885895 4398
slave.cpp:7161] Current disk usage 26.79%. Max allowed age:
4.424486483391273days
Jul 31 12:51:48 c04 mesos-slave[1411598]: I0731 12:51:48.971586 1411633
slave.cpp:6860] Current disk usage 11.15%. Max allowed age:
5.519823894437384days
Jul 31 12:52:11 c04 mesos-slave[1411598]: I0731 12:52:11.764261 1411627
slave.cpp:3630] Asked to kill task
server.0a6ab619-b23f-11e9-be5a-0050563001a1 of framework 0
Jul 31 12:52:11 m01 marathon: [2019-07-31 12:52:11,763] WARN No kill
ack received for instance
[server.marathon-0a6ab619-b23f-11e9-be5a-0050563001a1], retrying (24)
Jul 31 12:52:11 m01 marathon: [2019-07-31 12:52:11,763] WARN Killing
known task [server.0a6ab619-b23f-11e9-be5a-0050563001a1] of instance
instance [server.marathon)
Jul 31 12:52:26 c04 mesos-slave[1411598]: W0731 12:52:26.247673 1411658
process.cpp:1890] Failed to send 'mesos.internal.KillTaskMessage' to
'192.168.122.140:33137't
Jul 31 12:52:27 m03 mesos-slave[4368]: I0731 12:52:27.886598 4401
slave.cpp:7161] Current disk usage 26.79%. Max allowed age:
4.424486483391273days
Jul 31 12:52:48 c04 mesos-slave[1411598]: I0731 12:52:48.972520 1411657
slave.cpp:6860] Current disk usage 11.15%. Max allowed age:
5.519680739035937days

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.


_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: Dropping only info messages [ In reply to ]
Ps Looking for a fix for centos6, rsyslog-5.8.10-12.el6.x86_64


-----Original Message-----
Subject: RE: [rsyslog] Dropping only info messages


This is also not working

if ($programname == 'mesos-slave') or ($programname == 'marathon') \
then {
*.* -/var/log/mesos.log
*.info ~
}



-----Original Message-----
Subject: Re: [rsyslog] Dropping only info messages


Something like this? (does not work)

if ($programname == 'mesos-slave') or ($programname == 'marathon') \
then -/var/log/mesos.log
& if ($syslogseverity <= 6 ) then ~



-----Original Message-----
To: rsyslog@lists.adiscon.com
Subject: Dropping only info messages


I have this configuration file[0] in /etc/rsyslog.d/, generating this
log[1]. The last statement & ~ drops the messages.

How can only drop the .info messages and make sure warning and errors
continue to be processed in the remaining of the rsyslogd.conf?


[0]
if ($programname == 'mesos-slave') or ($programname == 'marathon') \
then -/var/log/mesos.log
& ~

[1]
Jul 31 12:51:11 m01 marathon: [2019-07-31 12:51:11,773] WARN Killing
known task [server.0a6ab619-b23f-11e9-be5a-0050563001a1] of instance
instance [server.marathon)
Jul 31 12:51:27 m03 mesos-slave[4368]: I0731 12:51:27.885895 4398
slave.cpp:7161] Current disk usage 26.79%. Max allowed age:
4.424486483391273days
Jul 31 12:51:48 c04 mesos-slave[1411598]: I0731 12:51:48.971586 1411633
slave.cpp:6860] Current disk usage 11.15%. Max allowed age:
5.519823894437384days
Jul 31 12:52:11 c04 mesos-slave[1411598]: I0731 12:52:11.764261 1411627
slave.cpp:3630] Asked to kill task
server.0a6ab619-b23f-11e9-be5a-0050563001a1 of framework 0
Jul 31 12:52:11 m01 marathon: [2019-07-31 12:52:11,763] WARN No kill
ack received for instance
[server.marathon-0a6ab619-b23f-11e9-be5a-0050563001a1], retrying (24)
Jul 31 12:52:11 m01 marathon: [2019-07-31 12:52:11,763] WARN Killing
known task [server.0a6ab619-b23f-11e9-be5a-0050563001a1] of instance
instance [server.marathon)
Jul 31 12:52:26 c04 mesos-slave[1411598]: W0731 12:52:26.247673 1411658
process.cpp:1890] Failed to send 'mesos.internal.KillTaskMessage' to
'192.168.122.140:33137't
Jul 31 12:52:27 m03 mesos-slave[4368]: I0731 12:52:27.886598 4401
slave.cpp:7161] Current disk usage 26.79%. Max allowed age:
4.424486483391273days
Jul 31 12:52:48 c04 mesos-slave[1411598]: I0731 12:52:48.972520 1411657
slave.cpp:6860] Current disk usage 11.15%. Max allowed age:
5.519680739035937days

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.



_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
Re: Dropping only info messages [ In reply to ]
syslogseverity gets smaller the more important it is, so $syslogseverity <= 6
then stop will throw away only messages more critical than info, change it to a
<

also, - in front of the filename does nothing on rsyslog, messages are always
buffered.

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.