Mailing List Archive

Dropping messages with invalid severity
Hi,

Is it possible in rsyslog (5.8.10) to drop messages containing invalid
severity or priority values?

I have a dhcp daemon which seems to generate invalid values sometimes.
My syslog server can't insert those messages in de (postgres) database:

ERROR: column "invld" does not exist at character 198
STATEMENT: insert into SystemEvents (Message, Facility, FromHost,
Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (E'
DHCPNAK on 192.168.0.105 to 18:34:51:34:6e:2f via 131.211.238.1', invld,
'dhcp.uu.nl', invld, '2012-04-18 10:47:36', '2012-04-18 10:47:36', 1,
'dhcpd:')

It seems to try forever (allthough "$ActionResumeRetryCount 10").
The files with stalled input on disk contain:

+iSeverity:2:2:-1:
+iFacility:2:2:-1:

Regards,
--
Henk van Lingen, ICT-SC Netwerk & Telefonie, (o- -+
Universiteit Utrecht, Jenalaan 18a, room 0.12 /\ |
phone: +31-30-2538453 v_/_ |
http://henk.vanlingen.net/ http://www.tuxtown.net/netiquette/
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
Re: Dropping messages with invalid severity [ In reply to ]
On Wed, Apr 18, 2012 at 01:53:42PM +0200, Henk van Lingen wrote:

Anyone a suggestion on this one?

Thanx,

> Is it possible in rsyslog (5.8.10) to drop messages containing invalid
> severity or priority values?
>
> I have a dhcp daemon which seems to generate invalid values sometimes.
> My syslog server can't insert those messages in de (postgres) database:
>
> ERROR: column "invld" does not exist at character 198
> STATEMENT: insert into SystemEvents (Message, Facility, FromHost,
> Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (E'
> DHCPNAK on 192.168.0.105 to 18:34:51:34:6e:2f via 131.211.238.1', invld,
> 'dhcp.uu.nl', invld, '2012-04-18 10:47:36', '2012-04-18 10:47:36', 1,
> 'dhcpd:')
>
> It seems to try forever (allthough "$ActionResumeRetryCount 10").
> The files with stalled input on disk contain:
>
> +iSeverity:2:2:-1:
> +iFacility:2:2:-1:

--
Henk van Lingen, ICT-SC Netwerk & Telefonie, (o- -+
Universiteit Utrecht, Jenalaan 18a, room 0.12 /\ |
phone: +31-30-2538453 v_/_ |
http://henk.vanlingen.net/ http://www.tuxtown.net/netiquette/
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards