summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | | typo fixRainer Gerhards2013-01-241-1/+1
| | |
* | | added omusrmsg changes to v7 compatibility docRainer Gerhards2013-01-241-1/+32
| | | | | | | | | | | | Thanks to Tomas Heinrich for pointing out that this was missing.
* | | - added $!all-json to property replacerRadu Gheorghe2013-01-241-1/+9
| | | | | | | | | | | | - specified that $!<name> can be used with CEE-enhanced syslog (once parsed via mmjsonparse)
* | | Merge branch 'v5-stable' into v7-stableRainer Gerhards2013-01-143-1/+7
|\ \ \ | | |/ | |/|
| * | doc: mention last patch in ChangeLogRainer Gerhards2013-01-141-0/+2
| | |
| * | bugfix: decrement string lengthTomas Heinrich2013-01-141-1/+3
| | |
| * | tcpflood: properly terminate when sending small filesRainer Gerhards2013-01-141-0/+2
| | |
* | | bugfix: omelasticsearch failed when authentication data was providedRainer Gerhards2013-01-132-1/+6
| | | | | | | | | | | | | | | | | | | | | ... at least in most cases it emitted an error message: "snprintf failed when trying to build auth string" Thanks to Joerg Heinemann for alerting us. closes: http://bugzilla.adiscon.com/show_bug.cgi?id=404
* | | fix compile problem due to new (Solaris) compat layerRainer Gerhards2013-01-101-1/+1
| | | | | | | | | | | | | | | The compat layer was not fully integrated into the build system, causing ./configure to fail.
* | | bugfix: some property-based filter were incorrectly parsedRainer Gerhards2013-01-092-2/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This usually lead to a syntax error on startup and rsyslogd not actually starting up. The problem was the regex, which did not care for double quote characters to follow in the action part - unfortunately something that can frequently happen with v6+ format. An example: :programname, isequal, "as" {action(type="omfile" ...) } Here, the part :programname, isequal, "as" {action(type="omfile" was treated as the property filter, and the rest as action part. Obviously, this did not work out. Unfortunately, such situations usually resulted in very hard to understand error messages.
* | | improve config reader error messages a bit moreRainer Gerhards2013-01-091-6/+12
| | |
* | | slightly improved config parser error messages when invalid escapes happenRainer Gerhards2013-01-092-1/+5
| | |
* | | fix typo from last patch, prevented compile on non-solarisRainer Gerhards2013-01-091-2/+2
| | |
* | | Use compatibility library if getifaddrs(3) not availableMartin Carpenter2013-01-091-0/+4
| | |
* | | compat dir: a bit restructuring and make sure config.h is includedRainer Gerhards2013-01-092-1/+5
| | |
* | | Add compatibility libraryRainer Gerhards2013-01-094-1/+368
| | | | | | | | | | | | | | | | | | Conflicts: configure.ac
* | | remove no longer necessary configure test for sysinfo()Rainer Gerhards2013-01-091-1/+1
| | |
* | | Check that sysinfo(2) can return uptimeMartin Carpenter2013-01-092-1/+7
| | |
* | | Add LOG_AUDIT facility for eg SolarisMartin Carpenter2013-01-091-0/+3
| | |
* | | prepare for 7.2.5 releasev7.2.5Rainer Gerhards2013-01-083-3/+3
| | |
* | | im3195: object was not freed on exit [ASL2.0]Martin Körper2013-01-081-0/+1
| | | | | | | | | | | | | | | This and the other patch from Martin (this morning) was released under ASL 2.0 by him.
* | | bugfix: mmjsonparse errornously returned action error when no CEE cookie was ↵Rainer Gerhards2013-01-082-0/+3
| | | | | | | | | | | | present.
* | | bugfix: doGetFileCreateMode() had invalid validity check ;)Chandler Latour2013-01-082-5/+7
| | |
* | | bugfix: compile errors in im3195Martin Körper2013-01-082-1/+16
| | |
* | | amend last commit with license info (ASL 2.0 as of email conversation with ↵Rainer Gerhards2013-01-081-1/+2
| | | | | | | | | | | | David)
* | | bugfix: timeval2syslogTime cause problems on some platformsDavid Hill2013-01-082-1/+7
| | | | | | | | | | | | | | | ...due to invalid assumption on structure data types. closes: http://bugzilla.adiscon.com/show_bug.cgi?id=394
* | | bugfix: very large memory consumption (and probably out of memory)Rainer Gerhards2013-01-072-0/+5
| | | | | | | | | | | | | | | ...when FromPos was specified in template, but ToPos not. Thanks to Radu Gheorghe for alerting us of this bug.
* | | bugfix: on termination, actions were incorrectly calledRainer Gerhards2012-12-202-7/+23
| | | | | | | | | | | | | | | | | | | | | The problem was that incomplete fiter evaluation was done *during the shutdown phase*. This affected only the LAST batches being processed. No problem existed during the regular run. Could usually only happen on very busy systems, which were still busy during shutdown.
* | | cosmetic: silence compiler warningRainer Gerhards2012-12-181-0/+4
| | |
* | | Merge branch 'v6-stable' into v7-stableRainer Gerhards2012-12-172-0/+9
|\ \ \ | | |/ | |/| | | | | | | Conflicts: plugins/omudpspoof/omudpspoof.c
| * | Merge branch 'v5-stable' into v6-stableRainer Gerhards2012-12-172-1/+10
| |\|
| | * bugfix[kind of]: omudpspoof discarded messages >1472 bytes (MTU size)Rainer Gerhards2012-12-172-1/+10
| | | | | | | | | | | | | | | it now truncates these message, but ensures they are sent. Note that 7.2.5+ will switch to fragmented UDP messages instead (up to 64K)
* | | omudpspoof: better debug outputRainer Gerhards2012-12-171-10/+14
| | |
* | | add extra debug info to tackle omudpspoof problemRainer Gerhards2012-12-171-0/+1
| | |
* | | doc: mention recent patches in ChangeLogRainer Gerhards2012-12-131-0/+7
| | |
* | | Merge branch 'v6-stable' into v7-stableRainer Gerhards2012-12-132-1/+5
|\| |
| * | Merge branch 'v5-stable' into v6-stableRainer Gerhards2012-12-132-1/+5
| |\| | | | | | | | | | | | | Conflicts: ChangeLog
| | * bugfix: invalid DST handling under SolarisScott Severtson2012-12-132-1/+3
| | |
* | | build: link omelasticsearch against -lmMichael Biebl2012-12-132-1/+2
| | | | | | | | | | | | Use LT_LIB_M to find the math library which is needed for pow().
* | | build: drop obsolete --enable-pthreads configure switchMichael Biebl2012-12-131-18/+2
| | | | | | | | | | | | Building without pthreads support hasn't been support for a while.
* | | build: fix uuid configure checkMichael Biebl2012-12-131-3/+3
| | |
* | | prepare for 7.2.4v7.2.4Rainer Gerhards2012-12-073-3/+3
| | |
* | | doc: mention important up-merged patch in ChangeLogRainer Gerhards2012-12-071-0/+15
| | |
* | | Merge branch 'v6-stable-newmsglock' into v7-stable-newmsglockRainer Gerhards2012-12-065-167/+24
|\| | | | | | | | | | | | | | Conflicts: tools/syslogd.c
| * | bugfix: some message properties could be garbled due to race conditionRainer Gerhards2012-12-066-169/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This happened only on very high volume systems, if the same message was being processed by two different actions. This was a regression caused by the new config processor, which did no longer properly enable msg locking in multithreaded cases. The bugfix is actually a refactoring of the msg locking code - we no longer do unlocked operations, as the use case for it has mostly gone away. It is potentially possible only at very low-end systems, and there the small additional overhead of doing the locking does not really hurt. Instead, the removal of that capability can actually slightly improve performance in common cases, as the code path is smaller and requires slightly less memory writes. That probably outperforms the extra locking overhead (which in the low-end case always happens in user space, without need for kernel support as we can always directly aquire the lock - there is no contention at all).
* | | permit RFC3339 timestamp in local log socket messagesSebastien Ponce2012-12-032-3/+9
| | | | | | | | | | | | Released under ASL 2.0, permission given via email.
* | | fix missing functionality: ruleset(){} could not specify ruleset queueRainer Gerhards2012-11-309-63/+151
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The "queue.xxx" parameter set was not supported, and legacy ruleset config statements did not work (by intention). The fix introduces the "queue.xxx" parameter set. It has some regression potential, but only for the new functionality. Note that using that interface it is possible to specify duplicate queue file names, which will cause trouble. This will be solved in v7.3, because there is a too-large regression potential for the v7.2 stable branch.
* | | silence compiler warningsRainer Gerhards2012-11-305-8/+29
| | | | | | | | | | | | | | | the changes do not affect actual code execution, just keep the compile log clean.
* | | fix display problem with some date-format template optionsRainer Gerhards2012-11-291-1/+7
| | |
* | | bugfix: template "type" parameter is mandatory (but was not)Rainer Gerhards2012-11-292-4/+6
| | |