From 695f7b70c4ea2943264942c15d31f44fb78eef84 Mon Sep 17 00:00:00 2001 From: Florian Beer Date: Fri, 5 Aug 2016 14:42:46 +0200 Subject: [PATCH] Update rsyslog 5 template We want textual representations of "syslogfacility" and "syslogpriority". Also I think it's better to use "timereported" than "timegenerated". Otherwise your log messages would be out of order if the servers don't all run in the same timezone (localtime). --- doc/Extensions/Syslog.md | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/doc/Extensions/Syslog.md b/doc/Extensions/Syslog.md index d77e5c8f5f..80e53a4c40 100644 --- a/doc/Extensions/Syslog.md +++ b/doc/Extensions/Syslog.md @@ -114,12 +114,11 @@ Ancient versions of rsyslog may require different syntax. This is an example for rsyslog 5 (default on Debian 7): ```bash -# Feed syslog messages to librenms -$ModLoad omprog - -$template librenms,"%FROMHOST%||%syslogfacility%||%syslogpriority%||%syslogseverity%||%syslogtag%||%$YEAR%-%$MONTH%-%$DAY% %timereported:8:25%||%msg%||%programname%\n" - -$ActionOMProgBinary /opt/librenms/syslog.php +# Feed syslog messages to librenms +$ModLoad omprog +$template librenms,"%FROMHOST%||%syslogfacility-text%||%syslogpriority-text%||%syslogseverity%||%syslogtag%||%$YEAR%-%$MONTH%-%$DAY% %timegenerated:8:25%||%msg%||%programname%\n" + +$ActionOMProgBinary /opt/librenms/syslog.php *.* :omprog:;librenms ```