Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: RSyslog: users

Dropping messages with invalid severity

 

 

RSyslog users RSS feed   Index | Next | Previous | View Threaded


H.G.K.vanLingen at uu

Apr 18, 2012, 4:53 AM

Post #1 of 2 (342 views)
Permalink
Dropping messages with invalid severity

Hi,

Is it possible in rsyslog (5.8.10) to drop messages containing invalid
severity or priority values?

I have a dhcp daemon which seems to generate invalid values sometimes.
My syslog server can't insert those messages in de (postgres) database:

ERROR: column "invld" does not exist at character 198
STATEMENT: insert into SystemEvents (Message, Facility, FromHost,
Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (E'
DHCPNAK on 192.168.0.105 to 18:34:51:34:6e:2f via 131.211.238.1', invld,
'dhcp.uu.nl', invld, '2012-04-18 10:47:36', '2012-04-18 10:47:36', 1,
'dhcpd:')

It seems to try forever (allthough "$ActionResumeRetryCount 10").
The files with stalled input on disk contain:

+iSeverity:2:2:-1:
+iFacility:2:2:-1:

Regards,
--
Henk van Lingen, ICT-SC Netwerk & Telefonie, (o- -+
Universiteit Utrecht, Jenalaan 18a, room 0.12 /\ |
phone: +31-30-2538453 v_/_ |
http://henk.vanlingen.net/ http://www.tuxtown.net/netiquette/
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards


H.G.K.vanLingen at uu

May 7, 2012, 12:11 AM

Post #2 of 2 (296 views)
Permalink
Re: Dropping messages with invalid severity [In reply to]

On Wed, Apr 18, 2012 at 01:53:42PM +0200, Henk van Lingen wrote:

Anyone a suggestion on this one?

Thanx,

> Is it possible in rsyslog (5.8.10) to drop messages containing invalid
> severity or priority values?
>
> I have a dhcp daemon which seems to generate invalid values sometimes.
> My syslog server can't insert those messages in de (postgres) database:
>
> ERROR: column "invld" does not exist at character 198
> STATEMENT: insert into SystemEvents (Message, Facility, FromHost,
> Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (E'
> DHCPNAK on 192.168.0.105 to 18:34:51:34:6e:2f via 131.211.238.1', invld,
> 'dhcp.uu.nl', invld, '2012-04-18 10:47:36', '2012-04-18 10:47:36', 1,
> 'dhcpd:')
>
> It seems to try forever (allthough "$ActionResumeRetryCount 10").
> The files with stalled input on disk contain:
>
> +iSeverity:2:2:-1:
> +iFacility:2:2:-1:

--
Henk van Lingen, ICT-SC Netwerk & Telefonie, (o- -+
Universiteit Utrecht, Jenalaan 18a, room 0.12 /\ |
phone: +31-30-2538453 v_/_ |
http://henk.vanlingen.net/ http://www.tuxtown.net/netiquette/
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards

RSyslog users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.