From c8fc40bf330f815196a937390a43709a138b1aee Mon Sep 17 00:00:00 2001 From: Milan Bartos Date: Mon, 17 Sep 2012 11:04:16 +0200 Subject: Documentation for new imkmsg module new file: doc/imkmsg.html --- doc/imkmsg.html | 48 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 48 insertions(+) create mode 100644 doc/imkmsg.html diff --git a/doc/imkmsg.html b/doc/imkmsg.html new file mode 100644 index 00000000..61068d09 --- /dev/null +++ b/doc/imkmsg.html @@ -0,0 +1,48 @@ + + +/dev/kmsg Log Input Module (imkmsg) + + + +back + +

/dev/kmsg Log Input Module

Module Name: imkmsg

Authors: Rainer Gerhards +<rgerhards@adiscon.com>
+Milan Bartos +<mbartos@redhat.com>

Description:

Reads messages from the /dev/kmsg structured kernel log and submits them to the +syslog engine.

+The printk log buffer constains log records. These records are exported by /dev/kmsg +device as structured data in the following format:
+ "level,sequnum,timestamp;<message text>\n"
+There could be continuation lines starting with space that contains key/value pairs.
+
+Log messages are parsed as necessary into rsyslog msg_t structure. Continuation lines are parsed +as json key/value pairs and added into rsyslog's message json representation. +

Configuration Directives:

+This module has no configuration directives. +Caveats/Known Bugs: +

This is Linux specific module and requires /dev/kmsg device with structured kernel logs. +

Sample:

The following sample pulls messages from the /dev/kmsg log device. All +parameters are left by default, which is usually a good idea. Please +note that loading the plugin is sufficient to activate it. No directive +is needed to start pulling messages.
+

+ +

[rsyslog.conf overview] +[manual index] [rsyslog site]

+ -- cgit v1.2.3