saz / puppet-rsyslog

Manage rsyslog through puppet
Apache License 2.0
50 stars 205 forks source link

*.emerg log line duplication with local logging? #223

Open esalberg opened 7 years ago

esalberg commented 7 years ago

1) The default rsyslog.conf (templates/rsyslog.conf.erb) appears to cover _.emerg for everyone, whether or not local logging is enabled, correct? <% if @rsyslog_version and @rsyslog_version.split('.')[0].toi >= 7 -%> *.emerg :omusrmsg: <% else -%> .emerg <% end -%>

Those lines are duplicated in templates/client/local.conf.erb for freebsd. Should they be removed from the local.conf.erb template? (I don't have any freebsd servers, but I was looking at PR #216 and the emergency lines were confusing me.)

esalberg commented 7 years ago

I’ll need to check more about the *.emerg messages, but do you not get this in the default rsyslog.conf from the module?

#

Emergencies are sent to everybody logged in.

# .emerg

I was assuming that would suffice and we wouldn’t need the same line in client.conf, but my assumption could be incorrect.

I do see the issue with the freebsd gating in #228, as we had to put the other lines back – I just didn’t know if emergency was necessary or not.

From: Brian Schonecker [mailto:notifications@github.com] Sent: Friday, September 30, 2016 12:36 PM To: saz/puppet-rsyslog puppet-rsyslog@noreply.github.com Cc: Elyse Salberg Elyse_Salberg@putnam.com; Author author@noreply.github.com Subject: Re: [saz/puppet-rsyslog] *.emerg log line duplication with local logging? (#223)

I think the opposite is true. I am not getting ANY emergency messages on Red Hat systems. See #228https://github.com/saz/puppet-rsyslog/issues/228

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/saz/puppet-rsyslog/issues/223#issuecomment-250791653, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AI768u2_smElElTHV5DvUIHf_mfxLFlkks5qvTpigaJpZM4KC74j.

This message is intended for the recipient only and is not meant to be forwarded or distributed in any other format. This communication is for informational purposes only. It is not intended as an offer or solicitation for the purchase or sale of any financial instrument, or security, or as an official confirmation of any transaction. Putnam does not accept purchase or redemptions of securities, instructions, or authorizations that are sent via e-mail. All market prices, data and other information are not warranted as to completeness or accuracy and are subject to change without notice. Any comments or statements made herein do not necessarily reflect those of Putnam Investments, LLC (DBA Putnam Investments) and its subsidiaries and affiliates. If you are not the intended recipient of this e-mail, please delete the e-mail.