Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | | typo fix | Rainer Gerhards | 2013-01-24 | 1 | -1/+1 | |
| | | | ||||||
* | | | added omusrmsg changes to v7 compatibility doc | Rainer Gerhards | 2013-01-24 | 1 | -1/+32 | |
| | | | | | | | | | | | | Thanks to Tomas Heinrich for pointing out that this was missing. | |||||
* | | | - added $!all-json to property replacer | Radu Gheorghe | 2013-01-24 | 1 | -1/+9 | |
| | | | | | | | | | | | | - specified that $!<name> can be used with CEE-enhanced syslog (once parsed via mmjsonparse) | |||||
* | | | Merge branch 'v5-stable' into v7-stable | Rainer Gerhards | 2013-01-14 | 3 | -1/+7 | |
|\ \ \ | | |/ | |/| | ||||||
| * | | doc: mention last patch in ChangeLog | Rainer Gerhards | 2013-01-14 | 1 | -0/+2 | |
| | | | ||||||
| * | | bugfix: decrement string length | Tomas Heinrich | 2013-01-14 | 1 | -1/+3 | |
| | | | ||||||
| * | | tcpflood: properly terminate when sending small files | Rainer Gerhards | 2013-01-14 | 1 | -0/+2 | |
| | | | ||||||
* | | | bugfix: omelasticsearch failed when authentication data was provided | Rainer Gerhards | 2013-01-13 | 2 | -1/+6 | |
| | | | | | | | | | | | | | | | | | | | | | ... at least in most cases it emitted an error message: "snprintf failed when trying to build auth string" Thanks to Joerg Heinemann for alerting us. closes: http://bugzilla.adiscon.com/show_bug.cgi?id=404 | |||||
* | | | fix compile problem due to new (Solaris) compat layer | Rainer Gerhards | 2013-01-10 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | The compat layer was not fully integrated into the build system, causing ./configure to fail. | |||||
* | | | bugfix: some property-based filter were incorrectly parsed | Rainer Gerhards | 2013-01-09 | 2 | -2/+16 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This usually lead to a syntax error on startup and rsyslogd not actually starting up. The problem was the regex, which did not care for double quote characters to follow in the action part - unfortunately something that can frequently happen with v6+ format. An example: :programname, isequal, "as" {action(type="omfile" ...) } Here, the part :programname, isequal, "as" {action(type="omfile" was treated as the property filter, and the rest as action part. Obviously, this did not work out. Unfortunately, such situations usually resulted in very hard to understand error messages. | |||||
* | | | improve config reader error messages a bit more | Rainer Gerhards | 2013-01-09 | 1 | -6/+12 | |
| | | | ||||||
* | | | slightly improved config parser error messages when invalid escapes happen | Rainer Gerhards | 2013-01-09 | 2 | -1/+5 | |
| | | | ||||||
* | | | fix typo from last patch, prevented compile on non-solaris | Rainer Gerhards | 2013-01-09 | 1 | -2/+2 | |
| | | | ||||||
* | | | Use compatibility library if getifaddrs(3) not available | Martin Carpenter | 2013-01-09 | 1 | -0/+4 | |
| | | | ||||||
* | | | compat dir: a bit restructuring and make sure config.h is included | Rainer Gerhards | 2013-01-09 | 2 | -1/+5 | |
| | | | ||||||
* | | | Add compatibility library | Rainer Gerhards | 2013-01-09 | 4 | -1/+368 | |
| | | | | | | | | | | | | | | | | | | Conflicts: configure.ac | |||||
* | | | remove no longer necessary configure test for sysinfo() | Rainer Gerhards | 2013-01-09 | 1 | -1/+1 | |
| | | | ||||||
* | | | Check that sysinfo(2) can return uptime | Martin Carpenter | 2013-01-09 | 2 | -1/+7 | |
| | | | ||||||
* | | | Add LOG_AUDIT facility for eg Solaris | Martin Carpenter | 2013-01-09 | 1 | -0/+3 | |
| | | | ||||||
* | | | prepare for 7.2.5 releasev7.2.5 | Rainer Gerhards | 2013-01-08 | 3 | -3/+3 | |
| | | | ||||||
* | | | im3195: object was not freed on exit [ASL2.0] | Martin Körper | 2013-01-08 | 1 | -0/+1 | |
| | | | | | | | | | | | | | | | This and the other patch from Martin (this morning) was released under ASL 2.0 by him. | |||||
* | | | bugfix: mmjsonparse errornously returned action error when no CEE cookie was ↵ | Rainer Gerhards | 2013-01-08 | 2 | -0/+3 | |
| | | | | | | | | | | | | present. | |||||
* | | | bugfix: doGetFileCreateMode() had invalid validity check ;) | Chandler Latour | 2013-01-08 | 2 | -5/+7 | |
| | | | ||||||
* | | | bugfix: compile errors in im3195 | Martin Körper | 2013-01-08 | 2 | -1/+16 | |
| | | | ||||||
* | | | amend last commit with license info (ASL 2.0 as of email conversation with ↵ | Rainer Gerhards | 2013-01-08 | 1 | -1/+2 | |
| | | | | | | | | | | | | David) | |||||
* | | | bugfix: timeval2syslogTime cause problems on some platforms | David Hill | 2013-01-08 | 2 | -1/+7 | |
| | | | | | | | | | | | | | | | ...due to invalid assumption on structure data types. closes: http://bugzilla.adiscon.com/show_bug.cgi?id=394 | |||||
* | | | bugfix: very large memory consumption (and probably out of memory) | Rainer Gerhards | 2013-01-07 | 2 | -0/+5 | |
| | | | | | | | | | | | | | | | ...when FromPos was specified in template, but ToPos not. Thanks to Radu Gheorghe for alerting us of this bug. | |||||
* | | | bugfix: on termination, actions were incorrectly called | Rainer Gerhards | 2012-12-20 | 2 | -7/+23 | |
| | | | | | | | | | | | | | | | | | | | | | The problem was that incomplete fiter evaluation was done *during the shutdown phase*. This affected only the LAST batches being processed. No problem existed during the regular run. Could usually only happen on very busy systems, which were still busy during shutdown. | |||||
* | | | cosmetic: silence compiler warning | Rainer Gerhards | 2012-12-18 | 1 | -0/+4 | |
| | | | ||||||
* | | | Merge branch 'v6-stable' into v7-stable | Rainer Gerhards | 2012-12-17 | 2 | -0/+9 | |
|\ \ \ | | |/ | |/| | | | | | | | Conflicts: plugins/omudpspoof/omudpspoof.c | |||||
| * | | Merge branch 'v5-stable' into v6-stable | Rainer Gerhards | 2012-12-17 | 2 | -1/+10 | |
| |\| | ||||||
| | * | bugfix[kind of]: omudpspoof discarded messages >1472 bytes (MTU size) | Rainer Gerhards | 2012-12-17 | 2 | -1/+10 | |
| | | | | | | | | | | | | | | | it now truncates these message, but ensures they are sent. Note that 7.2.5+ will switch to fragmented UDP messages instead (up to 64K) | |||||
* | | | omudpspoof: better debug output | Rainer Gerhards | 2012-12-17 | 1 | -10/+14 | |
| | | | ||||||
* | | | add extra debug info to tackle omudpspoof problem | Rainer Gerhards | 2012-12-17 | 1 | -0/+1 | |
| | | | ||||||
* | | | doc: mention recent patches in ChangeLog | Rainer Gerhards | 2012-12-13 | 1 | -0/+7 | |
| | | | ||||||
* | | | Merge branch 'v6-stable' into v7-stable | Rainer Gerhards | 2012-12-13 | 2 | -1/+5 | |
|\| | | ||||||
| * | | Merge branch 'v5-stable' into v6-stable | Rainer Gerhards | 2012-12-13 | 2 | -1/+5 | |
| |\| | | | | | | | | | | | | | Conflicts: ChangeLog | |||||
| | * | bugfix: invalid DST handling under Solaris | Scott Severtson | 2012-12-13 | 2 | -1/+3 | |
| | | | ||||||
* | | | build: link omelasticsearch against -lm | Michael Biebl | 2012-12-13 | 2 | -1/+2 | |
| | | | | | | | | | | | | Use LT_LIB_M to find the math library which is needed for pow(). | |||||
* | | | build: drop obsolete --enable-pthreads configure switch | Michael Biebl | 2012-12-13 | 1 | -18/+2 | |
| | | | | | | | | | | | | Building without pthreads support hasn't been support for a while. | |||||
* | | | build: fix uuid configure check | Michael Biebl | 2012-12-13 | 1 | -3/+3 | |
| | | | ||||||
* | | | prepare for 7.2.4v7.2.4 | Rainer Gerhards | 2012-12-07 | 3 | -3/+3 | |
| | | | ||||||
* | | | doc: mention important up-merged patch in ChangeLog | Rainer Gerhards | 2012-12-07 | 1 | -0/+15 | |
| | | | ||||||
* | | | Merge branch 'v6-stable-newmsglock' into v7-stable-newmsglock | Rainer Gerhards | 2012-12-06 | 5 | -167/+24 | |
|\| | | | | | | | | | | | | | | Conflicts: tools/syslogd.c | |||||
| * | | bugfix: some message properties could be garbled due to race condition | Rainer Gerhards | 2012-12-06 | 6 | -169/+26 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This happened only on very high volume systems, if the same message was being processed by two different actions. This was a regression caused by the new config processor, which did no longer properly enable msg locking in multithreaded cases. The bugfix is actually a refactoring of the msg locking code - we no longer do unlocked operations, as the use case for it has mostly gone away. It is potentially possible only at very low-end systems, and there the small additional overhead of doing the locking does not really hurt. Instead, the removal of that capability can actually slightly improve performance in common cases, as the code path is smaller and requires slightly less memory writes. That probably outperforms the extra locking overhead (which in the low-end case always happens in user space, without need for kernel support as we can always directly aquire the lock - there is no contention at all). | |||||
* | | | permit RFC3339 timestamp in local log socket messages | Sebastien Ponce | 2012-12-03 | 2 | -3/+9 | |
| | | | | | | | | | | | | Released under ASL 2.0, permission given via email. | |||||
* | | | fix missing functionality: ruleset(){} could not specify ruleset queue | Rainer Gerhards | 2012-11-30 | 9 | -63/+151 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The "queue.xxx" parameter set was not supported, and legacy ruleset config statements did not work (by intention). The fix introduces the "queue.xxx" parameter set. It has some regression potential, but only for the new functionality. Note that using that interface it is possible to specify duplicate queue file names, which will cause trouble. This will be solved in v7.3, because there is a too-large regression potential for the v7.2 stable branch. | |||||
* | | | silence compiler warnings | Rainer Gerhards | 2012-11-30 | 5 | -8/+29 | |
| | | | | | | | | | | | | | | | the changes do not affect actual code execution, just keep the compile log clean. | |||||
* | | | fix display problem with some date-format template options | Rainer Gerhards | 2012-11-29 | 1 | -1/+7 | |
| | | | ||||||
* | | | bugfix: template "type" parameter is mandatory (but was not) | Rainer Gerhards | 2012-11-29 | 2 | -4/+6 | |
| | | |