From 48e01bf4154aedd635c77094ecb58858af2b4c3b Mon Sep 17 00:00:00 2001 From: Rainer Gerhards Date: Tue, 25 Oct 2011 14:59:29 +0200 Subject: doc: imfile: clarified that empty lines are not processed --- doc/imfile.html | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'doc') diff --git a/doc/imfile.html b/doc/imfile.html index 89be3292..eb1a72a9 100644 --- a/doc/imfile.html +++ b/doc/imfile.html @@ -15,7 +15,9 @@ text file is a file consisting of printable characters with lines being delimited by LF.

The file is read line-by-line and any line read is passed to rsyslog's rule engine. The rule engine applies filter conditons and -selects which actions needs to be carried out.

+selects which actions needs to be carried out. Empty lines are not +processed, as they would result in empty syslog records. They are simply +ignored.

As new lines are written they are taken from the file and processed. Please note that this happens based on a polling interval and not immediately. The file monitor support file rotation. To fully -- cgit From eae869a3a4f2ea4c3bf4f54a9b1b61f00fc24f38 Mon Sep 17 00:00:00 2001 From: Rainer Gerhards Date: Thu, 3 Nov 2011 10:13:11 +0100 Subject: doc bugfix: typo in imgssapi doc --- doc/imgssapi.html | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) (limited to 'doc') diff --git a/doc/imgssapi.html b/doc/imgssapi.html index ec183fe7..dd90fec7 100644 --- a/doc/imgssapi.html +++ b/doc/imgssapi.html @@ -38,7 +38,7 @@ Sets the maximum number of sessions supported

This sets up a GSS server on port 1514 that also permits to receive plain tcp syslog messages (on the same port):

- @@ -47,8 +47,7 @@ $InputGSSServerPermitPlainTCP on

This documentation is part of the rsyslog project.
-Copyright © 2008 by Rainer -Gerhards and +Copyright © 2008-2011 by Rainer Gerhards and Adiscon. Released under the GNU GPL version 3 or higher.

-- cgit From 21c2f630e9ce218f86b1bd314e7c803b381fcec2 Mon Sep 17 00:00:00 2001 From: Rainer Gerhards Date: Fri, 16 Dec 2011 10:31:17 +0100 Subject: added doc for omprog --- doc/omprog.html | 43 +++++++++++++++++++++++++++++++++++++++++++ doc/rsyslog_conf_modules.html | 1 + 2 files changed, 44 insertions(+) create mode 100644 doc/omprog.html (limited to 'doc') diff --git a/doc/omprog.html b/doc/omprog.html new file mode 100644 index 00000000..471ab224 --- /dev/null +++ b/doc/omprog.html @@ -0,0 +1,43 @@ + +omprog output module - sending messages to a program +back + + +

Program integration Output module

Module Name: omprog

Available since: 4.3.0

Author: Rainer Gerhards +<rgerhards@adiscon.com>

Description:

This module permits to integrate arbitrary external programs into rsyslog's +logging. It is similar to the "execute program (^)" action, but offers better security +and much higher performance. While "execute program (^)" can be a useful tool for +executing programs if rare events occur, omprog can be used to provide massive +amounts of log data to a program. +

Executes the configured program and feeds log messages to that binary via +stdin. The binary is free to do whatever it wants with the supplied data. +If the program terminates, it is re-started. If rsyslog terminates, the +program's stdin will see EOF. The program must than terminate. The message format +passed to the program can, as usual, be modified by defining rsyslog templates. +

Note that each time an omprog action is defined, the corresponding programm +is invoked. A single instance is not being re-used. There are arguments pro and +con re-using existing binaries. For the time being, it simply is not done. In the future, +we may add an option for such pooling, provided that some demand for that is voiced. +You can also mimic the same effect by defining multiple rulesets and including them (at +the price of some slight performance loss). +

Configuration Directives:

$ActionOMProgBinary <binary>
+The binary program to be executed. +

+Caveats/Known Bugs: +

Currently none known. +

[rsyslog.conf overview] +[manual index] [rsyslog site]

This documentation is part of the rsyslog +project.
+Copyright © 2008-2011 by Rainer +Gerhards and +Adiscon. +Released under the GNU GPL version 3 or higher.

+ diff --git a/doc/rsyslog_conf_modules.html b/doc/rsyslog_conf_modules.html index b2830535..d9a59d8c 100644 --- a/doc/rsyslog_conf_modules.html +++ b/doc/rsyslog_conf_modules.html @@ -52,6 +52,7 @@ generic database output module (Firebird/Interbase, MS SQL, Sybase, SQLLite, Ingres, Oracle, mSQL)

ommail - permits rsyslog to alert folks by mail if something important happens

omprog - permits sending messages to a program for custom processing

omoracle - output module for Oracle (native OCI interface)

omuxsock - output module Unix domain sockets

-- cgit From 5fe837bf7dbdcc245ee233feb1fbcc6d052a4898 Mon Sep 17 00:00:00 2001 From: Rainer Gerhards Date: Mon, 19 Dec 2011 11:16:07 +0100 Subject: added instrumentation --- doc/impstats.html | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'doc') diff --git a/doc/impstats.html b/doc/impstats.html index cede4874..260c1aa4 100644 --- a/doc/impstats.html +++ b/doc/impstats.html @@ -18,7 +18,9 @@ prepared to change your trending scripts when you upgrade to a newer rsyslog ver output is periodic, with the interval being configurable (default is 5 minutes). Be sure that your configuration records the counter messages (default is syslog.info).

Note that loading this module has impact on rsyslog performance. Depending on -settings, this impact may be severe (for high-load environments). +settings, this impact may be noticable (for high-load environments). +

The rsyslog website has an updated overview of available +rsyslog statistic counters.

Configuration Directives:

-- cgit