Rsyslog expression with $programname is not working

Question

got this in my rsysconf:

    $template TemplateLog,"%msg%\n"   
    $template DynamicLog,"%msg%\n"                                                                                                                            
    $template DynamicFile,"/var/log/%PROGRAMNAME%.log"    
    if ($programname == "test") then {local3.=debug    -/var/log/path.log;TemplateLog}                                                                  
    local3.=debug    -?DynamicFile;DynamicLog                                                                                                                 
    & stop

If I put away the if statement, it works well. But I need to make the if statement working. What is wrong about it? Thank you for advice.

I tried to change the == to contains as suggested in one of answers, this does not help.

Is $programname containing same info as %PROGRAMNAME% ? This could cause the problem, maybe...

So acording to answer, I have made this:

$template TemplateLog,"%msg%\n"   
$template DynamicLog,"%msg%\n"                                                                                                                            
$template DynamicFile,"/var/log/%PROGRAMNAME%.log"           
template(name="pname" type="string" string="%PROGRAMNAME%")                                                                                               
set $!xyz = exec_template("pname");     
if ($!xyz contains'test') then {local3.=debug    -/var/log/path.log;TemplateLog}
local3.=debug    -?DynamicFile;DynamicLog                                                                                                                 
& stop

But unfortunately, this code is not working either. If I delete the if statement, the second DynamicFile is saved into test.log, so the value is correct.

Zhivko Zhelev · Answer 1 · 2021-11-03T15:09:18.297

0

You can always print the variable to see the output. I think is something related to syntax, please try using contains instead of ==.

You can assign it to a var using templates:

    $template DynamicLog,"%msg%\n"                                                                                                                            
    $template DynamicFile,"/var/log/%PROGRAMNAME%.log"    
    template(name="pname" type="string" string="%PROGRAMNAME%")
    set $!xyz = exec_template("pname");
    if ($!xyz contains 'test') then {local3.=debug    -/var/log/path.log;TemplateLog}                                                                 
    local3.=debug    -?DynamicFile;DynamicLog                                                                                                                 
    & stop```

edited Nov 03 '21 at 15:09

answered Nov 03 '21 at 07:23

Zhivko Zhelev

81
4

No, this is not helping. Im almost sure it is something with syntax, cant see it tho, as Im really not into this – ragulin Nov 03 '21 at 07:26
How do you print it tho? – ragulin Nov 03 '21 at 07:31
Ok, so ```$programname``` and ```%PROGRAMNAME%``` are not the same, you can't just use "programname" as var. – Zhivko Zhelev Nov 03 '21 at 14:44
So probably the ```if``` syntax is ok, but you can do it with template (I will edit my answer) – Zhivko Zhelev Nov 03 '21 at 14:52
Thanks ! I have adjusted the answer, so it is according to current state, but it still unfortunately doesnt work :( – ragulin Nov 03 '21 at 15:42

Rsyslog expression with $programname is not working

1 Answers1