rsyslog / rsyslog-website

website-related material, most importantly the issue tracker
6 stars 4 forks source link

More documentation on omrelp/imrelp #51

Open systemdlete opened 3 years ago

systemdlete commented 3 years ago

Please provide a complete example, somewhere, of how to set up remote logging using RELP.

The documentation is somewhat piecemeal as it comes to the omrelp and imrelp modules. Documentation found on the web indicates that RELP is now the standard, yet there is nothing in the rsyslog docs themselves that indicates this. In particular, there is no obvious clarification whether omrelp is required on the sending/client side of remote logging if imrelp is being used on the server side.

Also, I see that my distro (devuan) does not install librelp0 by default. Since this library is, per rsyslog docs, a requirement for using omrelp and imrelp, clearly RELP cannot be enabled by default, at least on my distro. By carefully tracking down these various pieces of information, I conclude that to use readmode=2 of the imrelp module (reliably, if at all?) one needs to install librelp0 and explicitly configure omrelp and imrelp on the respective servers. (Can the paragraph mode even be used on the server, reliably or otherwise, if the sender is not using omrelp? Seems to me not, but without deep source code inspection, I am not entirely certain.)

It would be gratifying for the documentation to completely and holistically clarify this because I am not entirely sure I have arrived at the correct conclusion. A complete example illustrating the action on each side would be helpful, though maybe not necessary if the documentation were thorough enough.

davidelang commented 3 years ago

relp is A standard that is available, not THE standard. (ryslog supports many different protocols). Where are you reading that it is THE standard?

Like any other protocol, if you want to send with the protocol, you need to configure the other end to receive the same protocol

readmode has to do with imfile (reading logs from a file), not with an over-the-wire protocol like relp. I don't see anything on the imrelp docs page mentioning readmode, please point at the docs you are reading?

the imrelp and omrelp pages include both normal and TLS encrypted examples how to configure it, so I'm confused about what you are looking for.

David Lang

On Fri, 17 Sep 2021, systemdlete wrote:

Date: Fri, 17 Sep 2021 21:21:17 -0700 From: systemdlete @.> Reply-To: rsyslog/rsyslog-website @.> To: rsyslog/rsyslog-website @.> Cc: Subscribed @.> Subject: [rsyslog/rsyslog-website] More documentation on omrelp/imrelp (#51)

Please provide a complete example, somewhere, of how to set up remote logging using RELP.

The documentation is somewhat piecemeal as it comes to the omrelp and imrelp modules. Documentation found on the web indicates that RELP is now the standard, yet there is nothing in the rsyslog docs themselves that indicates this. In particular, there is no obvious clarification whether omrelp is required on the sending/client side of remote logging if imrelp is being used on the server side.

Also, I see that my distro (devuan) does not install librelp0 by default. Since this library is, per rsyslog docs, a requirement for using omrelp and imrelp, clearly RELP cannot be enabled by default, at least on my distro. By carefully tracking down these various pieces of information, I conclude that to use readmode=2 of the imrelp module (reliably, if at all?) one needs to install librelp0 and explicitly configure omrelp and imrelp on the respective servers. (Can the paragraph mode even be used on the server, reliably or otherwise, if the sender is not using omrelp? Seems to me not, but without deep source code inspection, I am not entirely certain.)

It would be gratifying for the documentation to completely and holistically clarify this because I am not entirely sure I have arrived at the correct conclusion. A complete example illustrating the action on each side would be helpful, though maybe not necessary if the documentation were thorough enough.