On 2014-01-29 14:56, martinprowe wrote:
> Hi Robin,
> -TCP/UDP?- I wouldn’t mind either. Once I have something working, I
> can fine tune later. However, I think I am seeing TCP conversations in
Curious. Syslog is normally UDP. It is your router who decides.
> The router is using the DD_WRT code.
> So I have been trying to enable both in /etc/rsyslog/remote.conf. I have
> not seen any clues to suggest that they are mutually exclusive?
> -remote.conf?- Yep, mine is just like yours. But still no go? Do I
> need to do anything else?
In “/etc/rsyslog.conf” there is this comment:
## === When you're using remote logging, enable on-disk queues ===
## === in rsyslog.d/remote.conf. When neccesary also set the ===
## === SYSLOG_REQUIRES_NETWORK=yes in /etc/sysconfig/syslog, ===
## === e.g. when rsyslog has to receive on a specific IP only. ===
12.3 removed that entry, but rsyslog still says it is needed. Go figure.
You also need entries to pick messages from the router and write them
somewhere. In my case:
if ($source == 'router') then \
which works because my dns server does reverse resolution on the router IP.
But I don’t think that’s your issue yet.
The only additional information I can think of adding is the (very
limited) information I am see in the log files.
-/var/log/messages:- When I stop and restart the rsyslog service.
2014-01-29T13:30:10.993487+00:00 gzunder systemd: Stopping System Logging Service...
2014-01-29T13:30:10.994873+00:00 gzunder systemd: Stopped System Logging Service.
2014-01-29T13:30:12.013319+00:00 gzunder systemd: [/usr/lib/systemd/system/klog.service:26] Unknown lvalue ‘Names’ in section ‘Unit’
2014-01-29T13:30:31.283658+00:00 gzunder systemd: [/usr/lib/systemd/system/klog.service:26] Unknown lvalue ‘Names’ in section ‘Unit’
2014-01-29T13:30:52.149803+00:00 gzunder systemd: Reloading.
Does that tell us anything?
No, that’s irrelevant. I guess that systemd changed some syntax; some
units use “Names” and apparently it is not recognized.
What says this:
systemctl status rsyslog.service
Cheers / Saludos,
Carlos E. R.
(from 12.3 x86_64 “Dartmouth” at Telcontar)