=========================================================== .___ __ __ _________________ __ __ __| _/|__|/ |_ / ___\_` __ \__ \ | | \/ __ | | \\_ __\ / /_/ > | \// __ \| | / /_/ | | || | \___ /|__| (____ /____/\____ | |__||__| /_____/ \/ \/ grep rough audit - static analysis tool v2.8 written by @Wireghoul =================================[justanotherhacker.com]=== rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_dropmsgswithmaliciousdnsptrrecords.rst-20- rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_dropmsgswithmaliciousdnsptrrecords.rst:21:``$DropMsgsWithMaliciousDnsPTRRecords on`` rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_dropmsgswithmaliciousdnsptrrecords.rst-22- ############################################## rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_markmessageperiod.rst-22- rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_markmessageperiod.rst:23:``$MarkMessagePeriod 600 # mark messages appear every 10 Minutes`` rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_markmessageperiod.rst-24- ############################################## rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_controlcharacterescapeprefix.rst-22- rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_controlcharacterescapeprefix.rst:23:``$EscapeControlCharactersOnReceive # # as of syslog-protocol`` rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_controlcharacterescapeprefix.rst-24- ############################################## rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_droptrailinglfonreception.rst-19- rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_droptrailinglfonreception.rst:20:``$DropTrailingLFOnRecption on`` rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_droptrailinglfonreception.rst-21- ############################################## rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_escapecontrolcharactersonreceive.rst-32- rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_escapecontrolcharactersonreceive.rst:33:``$EscapeControlCharactersOnReceive on`` rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_escapecontrolcharactersonreceive.rst-34- ############################################## rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_escape8bitcharsonreceive.rst-37- rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_escape8bitcharsonreceive.rst:38:``$Escape8BitCharactersOnReceive on`` rsyslog-doc-8.2010.0/source/configuration/input_directives/rsconf1_escape8bitcharsonreceive.rst-39- ############################################## rsyslog-doc-8.2010.0/source/configuration/properties.rst-208- stamp because they actually were received at the same time. rsyslog-doc-8.2010.0/source/configuration/properties.rst:209:* ``$now`` is **not** from the message. It is the system time when the rsyslog-doc-8.2010.0/source/configuration/properties.rst-210- message is being **processed**. There is always a small difference rsyslog-doc-8.2010.0/source/configuration/properties.rst:211: between ``timegenerated`` and ``$now`` because processing always rsyslog-doc-8.2010.0/source/configuration/properties.rst-212- happens after reception. If the message is sitting inside a queue ############################################## rsyslog-doc-8.2010.0/source/configuration/dyn_stats.rst-60- rsyslog-doc-8.2010.0/source/configuration/dyn_stats.rst:61:``$.inc`` captures the error-code. It has value ``0`` when increment operation is successful and non-zero when it fails. It uses Rsyslog error-codes. rsyslog-doc-8.2010.0/source/configuration/dyn_stats.rst-62- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_maxopenfiles.rst-28- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_maxopenfiles.rst:29:``$MaxOpenFiles 2000`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_maxopenfiles.rst-30- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_mainmsgqueuesize.rst-32- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_mainmsgqueuesize.rst:33:``$MainMsgQueueSize 100000 # 100,000 may be a value to handle burst traffic`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_mainmsgqueuesize.rst-34- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_moddir.rst-18- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_moddir.rst:19:``$ModDir /usr/rsyslog/libs/ # note the trailing slash!`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_moddir.rst-20- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst-44- Say you can add an option rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst:45: ``$IncludeConfig /etc/rsyslog.d/`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst-46- (which probably would make a good default) ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst-62- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst:63:``$IncludeConfig /etc/some-included-file.conf`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst-64- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst-67- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst:68:``$IncludeConfig /etc/rsyslog.d/`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst-69- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst-72- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst:73:``$IncludeConfig /etc/rsyslog.d/*.conf`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_includeconfig.rst-74- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_generateconfiggraph.rst-147- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_generateconfiggraph.rst:148:``$DirOwner /path/to/graphfile-file.dot`` ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_failonchownfailure.rst-19- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_failonchownfailure.rst:20:``$FailOnChownFailure off`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_failonchownfailure.rst-21- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_umask.rst-19- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_umask.rst:20:``$umask 0000`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_umask.rst-21- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_modload.rst-17-modules. You can also set the directory via the rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_modload.rst:18:`$ModDir <rsconf1_moddir.html>`_ parameter. rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_modload.rst-19- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_modload.rst-24- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_modload.rst:25:``$ModLoad ommysql # load MySQL functionality $ModLoad /rsyslog/modules/ompgsql.so # load the postgres module via absolute path`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_modload.rst-26- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_resetconfigvariables.rst-17- rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_resetconfigvariables.rst:18:``$ResetConfigVariables`` rsyslog-doc-8.2010.0/source/configuration/global/options/rsconf1_resetconfigvariables.rst-19- ############################################## rsyslog-doc-8.2010.0/source/configuration/global/index.rst-93- **not** use trailing slashes) rsyslog-doc-8.2010.0/source/configuration/global/index.rst:94:- `$PrivDropToGroup <droppriv.html>`_ rsyslog-doc-8.2010.0/source/configuration/global/index.rst:95:- `$PrivDropToGroupID <droppriv.html>`_ rsyslog-doc-8.2010.0/source/configuration/global/index.rst:96:- `$PrivDropToUser <droppriv.html>`_ rsyslog-doc-8.2010.0/source/configuration/global/index.rst:97:- `$PrivDropToUserID <droppriv.html>`_ rsyslog-doc-8.2010.0/source/configuration/global/index.rst-98-- **$Sleep** <seconds> - puts the rsyslog main thread to sleep for the ############################################## rsyslog-doc-8.2010.0/source/configuration/property_replacer.rst-296- Note: using this option requires that rsyslog-doc-8.2010.0/source/configuration/property_replacer.rst:297: `$EscapeControlCharactersOnReceive <rsconf1_escapecontrolcharactersonreceive.html>`_ rsyslog-doc-8.2010.0/source/configuration/property_replacer.rst-298- is set to off. ############################################## rsyslog-doc-8.2010.0/source/configuration/property_replacer.rst-302- Note: using this option requires that rsyslog-doc-8.2010.0/source/configuration/property_replacer.rst:303: `$EscapeControlCharactersOnReceive <rsconf1_escapecontrolcharactersonreceive.html>`_ rsyslog-doc-8.2010.0/source/configuration/property_replacer.rst-304- is set to off. ############################################## rsyslog-doc-8.2010.0/source/configuration/property_replacer.rst-310- Note: using this option requires that rsyslog-doc-8.2010.0/source/configuration/property_replacer.rst:311: `$EscapeControlCharactersOnReceive <rsconf1_escapecontrolcharactersonreceive.html>`_ rsyslog-doc-8.2010.0/source/configuration/property_replacer.rst-312- is set to off. ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-40- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:41: "string", "none", "yes", "``$actionsnmptarget``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-42- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-55- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:56: "integer", "162", "no", "``$actionsnmptargetport``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-57- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-68- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:69: "string", "udp", "no", "``$actionsnmptransport``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-70- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-84- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:85: "integer", "1", "no", "``$actionsnmpversion``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-86- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-100- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:101: "string", "public", "no", "``$actionsnmpcommunity``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-102- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-113- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:114: "string", "1.3.6.1.4.1.19406.1.2.1", "no", "``$actionsnmptrapoid``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-115- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-139- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:140: "string", "1.3.6.1.4.1.19406.1.2.1", "no", "``$actionsnmpsyslogmessageoid``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-141- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-159- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:160: "string", "1.3.6.1.4.1.3.1.1", "no", "``$actionsnmpenterpriseoid``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-161- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-177- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:178: "integer", "0", "no", "``$actionsnmpspecifictype``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-179- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-222- rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst:223: "integer", "6", "no", "``$actionsnmptraptype``" rsyslog-doc-8.2010.0/source/configuration/modules/omsnmp.rst-224- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imdocker.rst-140- rsyslog-doc-8.2010.0/source/configuration/modules/imdocker.rst:141: "integer or string (preferred)", "user", "no", "``$InputFileFacility``" rsyslog-doc-8.2010.0/source/configuration/modules/imdocker.rst-142- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imdocker.rst-157- rsyslog-doc-8.2010.0/source/configuration/modules/imdocker.rst:158: "integer or string (preferred)", "notice", "no", "``$InputFileSeverity``" rsyslog-doc-8.2010.0/source/configuration/modules/imdocker.rst-159- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imrelp.rst-57- rsyslog-doc-8.2010.0/source/configuration/modules/imrelp.rst:58: "word", "none", "no", "``$InputRELPServerBindRuleset``" rsyslog-doc-8.2010.0/source/configuration/modules/imrelp.rst-59- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imrelp.rst-104- rsyslog-doc-8.2010.0/source/configuration/modules/imrelp.rst:105: "string", "none", "yes", "``$InputRELPServerRun``" rsyslog-doc-8.2010.0/source/configuration/modules/imrelp.rst-106- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imhttp.rst-219- rsyslog-doc-8.2010.0/source/configuration/modules/imhttp.rst:220:Enables metadata injection into `$!metadata` property. Currently, only header data is supported. rsyslog-doc-8.2010.0/source/configuration/modules/imhttp.rst-221-The following metadata will be injected into the following properties: rsyslog-doc-8.2010.0/source/configuration/modules/imhttp.rst-222- rsyslog-doc-8.2010.0/source/configuration/modules/imhttp.rst:223:- `$!metadata!httpheaders`: http header data will be injected here as key value pairs. All header names will automatically be lowercased rsyslog-doc-8.2010.0/source/configuration/modules/imhttp.rst-224- for case-insensitive access. ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-44-and `docker`. There will be subfields of each one for the various rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:45:metadata items: `$!kubernetes!namespace_name` rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:46:`$!kubernetes!labels!this-is-my-label`, etc. There is currently only rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:47:1 docker subfield: `$!docker!container_id`. See rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-48-https://github.com/ViaQ/elasticsearch-templates/blob/master/namespaces/kubernetes.yml ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-173-the `annotations` field in the pod and namespace metadata to include rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:174:in the `$!kubernetes!annotations` (for pod annotations) or the rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:175:`$!kubernetes!namespace_annotations` (for namespace annotations) rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-176-message properties. Example: `["k8s.*master","k8s.*node"]` ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-205-This is the where the `kubernetes` and `docker` properties will be rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:206:written. By default, the module will add `$!kubernetes` and rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:207:`$!docker`. rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-208- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-479-<../rsyslog_statistic_counter>`. The statistic is named rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:480:"mmkubernetes($kubernetesurl)", where `$kubernetesurl` is the rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-481-:ref:`kubernetesurl` setting for the action. ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-542- rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:543:`$!kubernetes!namespace_name`, `$!kubernetes!pod_name`, rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:544:`$!kubernetes!container_name`, `$!docker!id`, `$!kubernetes!master_url`. rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-545- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-549- rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:550:`$!kubernetes!namespace_id`, `$!kubernetes!pod_id`, rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:551:`$!kubernetes!creation_timestamp`, `$!kubernetes!host` rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-552- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-556- rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:557:`$!kubernetes!labels`, `$!kubernetes!annotations`, `$!kubernetes!namespace_labels`, rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst:558:`$!kubernetes!namespace_annotations` rsyslog-doc-8.2010.0/source/configuration/modules/mmkubernetes.rst-559- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-40- rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst:41: "word", "RSYSLOG_TraditionalForwardFormat", "no", "``$ActionForwardDefaultTemplateName``" rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-42- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-313- rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst:314: "integer", "0", "no", "``$ActionSendTCPRebindInterval`` or ``$ActionSendUDPRebindInterval``" rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-315- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-401- rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst:402: "word", "none", "no", "``$ActionSendStreamDriver``" rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-403- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-415- rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst:416: "integer", "0", "no", "``$ActionSendStreamDriverMode``" rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-417- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-428- rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst:429: "string", "none", "no", "``$ActionSendStreamDriverAuthMode``" rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-430- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-463- rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst:464: "word", "none", "no", "``$ActionSendStreamDriverPermittedPeers``" rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-465- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-525- rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst:526: "binary", "off", "no", "``$ActionSendResendLastMsgOnReconnect``" rsyslog-doc-8.2010.0/source/configuration/modules/omfwd.rst-527- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omstdout.rst-61- rsyslog-doc-8.2010.0/source/configuration/modules/omstdout.rst:62: "binary", "on", "no", "``$ActionOMStdoutEnsureLFEnding``" rsyslog-doc-8.2010.0/source/configuration/modules/omstdout.rst-63- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/immark.rst-34- rsyslog-doc-8.2010.0/source/configuration/modules/immark.rst:35: "integer", "1200", "", "no", "``$MarkMessagePeriod``" rsyslog-doc-8.2010.0/source/configuration/modules/immark.rst-36- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-49- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:50: "integer", "2", "no", "``$InputPTCPServerHelperThreads``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-51- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-115- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:116: "string", "none", "no", "``$InputPTCPServerRun``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-117- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-266- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:267: "string", "imptcp", "no", "``$InputPTCPServerInputName``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-268- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-283- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:284: "string", "none", "no", "``$InputPTCPServerBindRuleset``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-285- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-333- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:334: "string", "none", "no", "``$InputPTCPServerListenIP``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-335- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-347- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:348: "integer", "-1", "no", "``$InputPTCPServerAddtlFrameDelimiter``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-349- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-383- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:384: "binary", "on", "no", "``$InputPTCPSupportOctetCountedFraming``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-385- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-400- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:401: "binary", "off", "no", "``$InputPTCPServerNotifyOnConnectionClose``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-402- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-428- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:429: "binary", "off", "no", "``$InputPTCPServerKeepAlive``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-430- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-442- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:443: "integer", "0", "no", "``$InputPTCPServerKeepAlive_probes``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-444- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-459- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:460: "integer", "0", "no", "``$InputPTCPServerKeepAlive_intvl``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-461- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-476- rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst:477: "integer", "0", "no", "``$InputPTCPServerKeepAlive_time``" rsyslog-doc-8.2010.0/source/configuration/modules/imptcp.rst-478- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omprog.rst-84- rsyslog-doc-8.2010.0/source/configuration/modules/omprog.rst:85: "string", "", "yes", "``$ActionOMProgBinary``" rsyslog-doc-8.2010.0/source/configuration/modules/omprog.rst-86- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omprog.rst-322-zero. Please note that the actual permission depends on the rsyslogd process rsyslog-doc-8.2010.0/source/configuration/modules/omprog.rst:323:umask. If in doubt, use ``$umask 0000`` right at the beginning of the rsyslog-doc-8.2010.0/source/configuration/modules/omprog.rst-324-configuration file to remove any restrictions. ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omoracle.rst-112- case "$1" in rsyslog-doc-8.2010.0/source/configuration/modules/omoracle.rst:113: -*=*) optarg=`echo "$1" | sed 's/[-_a-zA-Z0-9]*=//'` ;; rsyslog-doc-8.2010.0/source/configuration/modules/omoracle.rst-114- *) optarg= ;; ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-81- rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst:82: "word", "none", "no", "``$ActionLibdbiDriverDirectory``" rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-83- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-114- rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst:115: "word", "none", "yes", "``$ActionLibdbiDriver``" rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-116- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-139- rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst:140: "word", "none", "yes", "``$ActionLibdbiHost``" rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-141- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-152- rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst:153: "word", "none", "yes", "``$ActionLibdbiUserName``" rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-154- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-165- rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst:166: "word", "none", "yes", "``$ActionlibdbiPassword``" rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-167- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-178- rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst:179: "word", "none", "yes", "``$ActionlibdbiDBName``" rsyslog-doc-8.2010.0/source/configuration/modules/omlibdbi.rst-180- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-58- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:59: "binary", "on", "no", "``$SystemLogSocketIgnoreMsgTimestamp``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-60- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-94- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:95: "binary", "on", "no", "``$OmitLocalLogging``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-96- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-121- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:122: "word", "/dev/log", "no", "``$SystemLogSocketName``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-123- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-140- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:141: "binary", "off", "no", "``$SystemLogFlowControl``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-142- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-153- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:154: "binary", "off", "no", "``$SystemLogUsePIDFromSystem``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-155- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-171- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:172: "integer", "0", "", "no", "``$SystemLogRateLimitInterval``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-173- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-188- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:189: "integer", "200", "(2^31)-1", "no", "``$SystemLogRateLimitBurst``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-190- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-203- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:204: "integer", "1", "", "no", "``$SystemLogRateLimitSeverity``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-205- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-220- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:221: "binary", "on", "no", "``$SystemLogUseSysTimeStamp``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-222- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-241- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:242: "binary", "off", "no", "``$SystemLogSocketAnnotate``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-243- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-255- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:256: "binary", "off", "no", "``$SystemLogParseTrusted``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-257- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-259-out of the trusted properties (which can be accessed via |FmtAdvancedName| rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:260:JSON Variables, e.g. ``$!pid``) instead of adding them to the message. rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-261- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-367- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:368: "binary", "on", "no", "``$InputUnixListenSocketIgnoreMsgTimestamp``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-369- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-405- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:406: "binary", "off", "no", "``$InputUnixListenSocketFlowControl``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-407- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-418- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:419: "integer", "0", "", "no", "``$IMUXSockRateLimitInterval``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-420- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-435- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:436: "integer", "200", "(2^31)-1", "no", "``$IMUXSockRateLimitBurst``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-437- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-450- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:451: "integer", "1", "", "no", "``$IMUXSockRateLimitSeverity``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-452- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-467- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:468: "binary", "off", "no", "``$InputUnixListenSocketUsePIDFromSystem``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-469- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-483- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:484: "binary", "on", "no", "``$InputUnixListenSocketUseSysTimeStamp``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-485- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-503- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:504: "binary", "off", "no", "``$InputUnixListenSocketCreatePath``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-505- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-530- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:531: "string", "none", "no", "``$AddUnixListenSocket``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-532- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-543- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:544: "string", "NULL", "no", "``$InputUnixListenSocketHostName``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-545- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-557- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:558: "binary", "off", "no", "``$InputUnixListenSocketAnnotate``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-559- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-571- rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst:572: "binary", "off", "no", "``$ParseTrusted``" rsyslog-doc-8.2010.0/source/configuration/modules/imuxsock.rst-573- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-616-reprocessing. Each failed request will be resubmitted with a local variable rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:617:called `$.omes`. This is a hash consisting of the fields from the metadata rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-618-header in the original request, and the fields from the response. If the same ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-628- rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:629:`$.omes` fields: rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-630- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-639- example, if you do not use `"pipelinename"` or `"dynpipelinename"`, there rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:640: will be no `$.omes!pipeline` field. rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-641-* error - a hash containing one or more, possibly nested, fields containing rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-642- more detailed information about a failure. Typically there will be fields rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:643: `$.omes!error!type` (a keyword) and `$.omes!error!reason` (a longer string) rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-644- with more detailed information about the rejection. NOTE: The format is ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-828-and whatever data is returned in the error response. All of these are made rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:829:available in the `$.omes` fields. If the same field name exists in the request rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-830-metadata and the response, the field from the request will be used, in order to ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-872- rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:873:That is, if this is a retry, `$.omes!_id` will be set, so use that value for rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:874:the bulk id for this record, otherwise, generate a new one with `$uuid`. Note rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:875:that the template uses the temporary variable `$.es_msg_id` which must be set rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:876:each time, to either `$.omes!_id` or `$uuid`. rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-877- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-994-for the initial attempt and any subsequent retries. The code in the ruleset rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst:995:assumes that if `$.omes!status` is set and is non-zero, this is a retry for a rsyslog-doc-8.2010.0/source/configuration/modules/omelasticsearch.rst-996-previously failed operation. If the status was successful, or Elasticsearch ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-52- rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst:53: "word", "none", "no", "``$InputGSSServerRun``" rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-54- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-66- rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst:67: "word", "none", "no", "``$InputGSSServerServiceName``" rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-68- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-79- rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst:80: "binary", "0", "no", "``$InputGSSServerPermitPlainTCP``" rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-81- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-93- rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst:94: "integer", "200", "no", "``$InputGSSServerMaxSessions``" rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-95- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-106- rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst:107: "binary", "0", "no", "``$InputGSSServerKeepAlive``" rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-108- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-121- rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst:122: "word", "none", "no", "``$InputGSSListenPortFileName``" rsyslog-doc-8.2010.0/source/configuration/modules/imgssapi.rst-123- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-69- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:70: "word", "RSYSLOG_FileFormat", "no", "``$ActionFileDefaultTemplate``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-71- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-83- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:84: "FileCreateMode", "0700", "no", "``$DirCreateMode``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-85- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-97- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:98: "FileCreateMode", "0644", "no", "``$FileCreateMode``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-99- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-111- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:112: "UID", "process user", "no", "``$FileOwner``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-113- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-139- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:140: "GID", "process user's primary group", "no", "``$FileGroup``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-141- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-167- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:168: "UID", "process user", "no", "``$DirOwner``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-169- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-195- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:196: "GID", "process user's primary group", "no", "``$DirGroup``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-197- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-291- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:292: "word", "template set via module parameter", "no", "``$ActionFileDefaultTemplate``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-293- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-324- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:325: "integer", "10", "no", "``$DynaFileCacheSize``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-326- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-352- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:353: "integer", "0", "no", "``$OMFileZipLevel``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-354- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-400- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:401: "integer", "1", "no", "``$OMFileFlushInterval``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-402- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-414- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:415: "binary", "off", "no", "``$OMFileASyncWriting``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-416- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-431- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:432: "binary", "on", "no", "``$OMFileFlushOnTXEnd``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-433- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-460- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:461: "size", "4 KiB", "no", "``$OMFileIOBufferSize``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-462- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-476- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:477: "UID", "system default", "no", "``$DirOwner``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-478- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-493- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:494: "integer", "system default", "no", "``$DirOwnerNum``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-495- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-512- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:513: "GID", "system default", "no", "``$DirGroup``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-514- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-529- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:530: "integer", "system default", "no", "``$DirGroupNum``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-531- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-546- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:547: "UID", "system default", "no", "``$FileOwner``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-548- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-563- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:564: "integer", "system default", "no", "``$FileOwnerNum``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-565- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-582- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:583: "GID", "system default", "no", "``$FileGroup``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-584- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-599- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:600: "integer", "system default", "no", "``$FileGroupNum``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-601- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-618- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:619: "string", "equally-named module parameter", "no", "``$FileCreateMode``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-620- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-638- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:639: "string", "equally-named module parameter", "no", "``$DirCreateMode``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-640- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-652- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:653: "binary", "on", "no", "``$FailOnCHOwnFailure``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-654- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-671- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:672: "binary", "on", "no", "``$CreateDirs``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-673- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-684- rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst:685: "binary", "off", "no", "``$ActionFileEnableSync``" rsyslog-doc-8.2010.0/source/configuration/modules/omfile.rst-686- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-36- rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst:37: "facility", "(see description)", "no", "``$KLogInternalMsgFacility``" rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-38- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-57- rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst:58: "binary", "off", "no", "``$KLogPermitNonKernelFacility``" rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-59- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-73- rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst:74: "integer", "-1", "no", "``$klogConsoleLogLevel``" rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-75- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-95- rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst:96: "binary", "off", "no", "``$klogParseKernelTimestamp``" rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-97- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-116- rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst:117: "binary", "off", "no", "``$klogKeepKernelTimestamp``" rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-118- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-133- rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst:134: "word", "(see description)", "no", "``$klogpath``" rsyslog-doc-8.2010.0/source/configuration/modules/imklog.rst-135- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-222- rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst:223: "string", "none", "yes", "``$InputFileName``" rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-224- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-237- rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst:238: "string", "none", "yes", "``$InputFileTag``" rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-239- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-252- rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst:253: "integer or string (preferred)", "local0", "no", "``$InputFileFacility``" rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-254- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-271- rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst:272: "integer or string (preferred)", "notice", "no", "``$InputFileSeverity``" rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-273- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-290- rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst:291: "integer", "0", "no", "``$InputFilePersistStateInterval``" rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-292- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-406- rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst:407: "integer", "0", "no", "``$InputFileReadMode``" rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-408- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-491- rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst:492: "integer", "0", "no", "``$InputFileMaxLinesAtOnce``" rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-493- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-567- rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst:568: "string", "none", "no", "``$InputFileBindRuleset``" rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-569- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-923- rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst:924: "string", "none", "no", "``$InputFileStateFile``" rsyslog-doc-8.2010.0/source/configuration/modules/imfile.rst-925- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-44- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:45: "integer", "-1", "no", "``$InputTCPServerAddtlFrameDelimiter``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-46- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-61- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:62: "binary", "off", "no", "``$InputTCPServerDisableLFDelimiter``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-63- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-101- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:102: "binary", "off", "no", "``$InputTCPServerNotifyOnConnectionClose``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-103- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-118- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:119: "binary", "off", "no", "``$InputTCPServerKeepAlive``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-120- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-132- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:133: "integer", "0", "no", "``$InputTCPServerKeepAlive_probes``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-134- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-149- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:150: "integer", "0", "no", "``$InputTCPServerKeepAlive_time``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-151- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-167- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:168: "binary", "on", "no", "``$InputTCPFlowControl``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-169- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-187- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:188: "integer", "20", "no", "``$InputTCPMaxListeners``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-189- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-201- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:202: "integer", "200", "no", "``$InputTCPMaxSessions``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-203- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-229- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:230: "integer", "0", "no", "``$InputTCPServerStreamDriverMode``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-231- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-244- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:245: "string", "none", "no", "``$InputTCPServerStreamDriverAuthMode``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-246- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-328- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:329: "array", "none", "no", "``$InputTCPServerStreamDriverPermittedPeer``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-330- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-438- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:439: "string", "none", "yes", "``$InputTCPServerRun``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-440- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-482- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:483: "string", "imtcp", "no", "``$InputTCPServerInputName``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-484- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-498- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:499: "string", "none", "no", "``$InputTCPServerBindRuleset``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-500- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-511- rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst:512: "binary", "on", "no", "``$InputTCPSupportOctetCountedFraming``" rsyslog-doc-8.2010.0/source/configuration/modules/imtcp.rst-513- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/ommysql.rst-106- rsyslog-doc-8.2010.0/source/configuration/modules/ommysql.rst:107: "integer", "none", "no", "``$ActionOmmysqlServerPort``" rsyslog-doc-8.2010.0/source/configuration/modules/ommysql.rst-108- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/ommysql.rst-122- rsyslog-doc-8.2010.0/source/configuration/modules/ommysql.rst:123: "word", "none", "no", "``$OmMySQLConfigFile``" rsyslog-doc-8.2010.0/source/configuration/modules/ommysql.rst-124- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/ommysql.rst-139- rsyslog-doc-8.2010.0/source/configuration/modules/ommysql.rst:140: "word", "none", "no", "``$OmMySQLConfigSection``" rsyslog-doc-8.2010.0/source/configuration/modules/ommysql.rst-141- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-21-addresses. As such, rsyslog cannot drop privileges if this module is rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst:22:to be used. Ensure that you do **not** use `$PrivDropToUser` or rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst:23:`$PrivDropToGroup`. Many distro default configurations (notably Ubuntu) rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-24-contain these statements. You need to remove or comment them out if you ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-63- rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst:64: "word", "none", "yes", "``$ActionOMUDPSpoofTargetHost``" rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-65- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-76- rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst:77: "word", "514", "no", "``$ActionOMUDPSpoofTargetPort``" rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-78- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-89- rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst:90: "word", "RSYSLOG_omudpspoofDfltSourceTpl", "no", "``$ActionOMOMUDPSpoofSourceNameTemplate``" rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-91- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-112- rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst:113: "integer", "32000", "no", "``$ActionOMUDPSpoofSourcePortStart``" rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-114- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-126- rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst:127: "integer", "42000", "no", "``$ActionOMUDPSpoofSourcePortEnd``" rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-128- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-153- rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst:154: "word", "RSYSLOG_TraditionalForwardFormat", "no", "``$ActionOMUDPSpoofDefaultTemplate``" rsyslog-doc-8.2010.0/source/configuration/modules/omudpspoof.rst-155- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst-33- rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst:34: "``$OMHDFSFileName``", "word", "none", "no" rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst-35- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst-42- rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst:43: "``$OMHDFSHost``", "word", "default", "no" rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst-44- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst-51- rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst:52: "``$OMHDFSPort``", "integer", "0", "no" rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst-53- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst-60- rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst:61: "``$OMHDFSDefaultTemplate``", "word", "RSYSLOG_FileFormat", "no" rsyslog-doc-8.2010.0/source/configuration/modules/omhdfs.rst-62- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/im3195.rst-43- rsyslog-doc-8.2010.0/source/configuration/modules/im3195.rst:44: "integer", "601", "no", "``$Input3195ListenPort``" rsyslog-doc-8.2010.0/source/configuration/modules/im3195.rst-45- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-74- rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst:75: "word", "none", "yes", "``$ActionMailSMTPServer``" rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-76- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-90- rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst:91: "word", "none", "yes", "``$ActionMailSMTPPort``" rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-92- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-104- rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst:105: "word", "none", "yes", "``$ActionMailFrom``" rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-106- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-117- rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst:118: "array", "none", "yes", "``$ActionMailTo``" rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-119- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-131- rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst:132: "word", "none", "no", "``$ActionMailSubject``" rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-133- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-162- rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst:163: "binary", "on", "no", "``$ActionMailEnableBody``" rsyslog-doc-8.2010.0/source/configuration/modules/ommail.rst-164- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/omruleset.rst-53-**At minimum, be sure you understand the** rsyslog-doc-8.2010.0/source/configuration/modules/omruleset.rst:54::doc:`$RulesetCreateMainQueue <../ruleset/rsconf1_rulesetcreatemainqueue>` rsyslog-doc-8.2010.0/source/configuration/modules/omruleset.rst-55-**directive as well as the importance of statement order in rsyslog.conf ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-69- rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst:70: "integer", "10", "no", "``$imjournalPersistStateInterval``" rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-71- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-85- rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst:86: "word", "none", "no", "``$imjournalStateFile``" rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-87- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-101- rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst:102: "integer", "600", "no", "``$imjournalRatelimitInterval``" rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-103- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-129- rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst:130: "integer", "20000", "no", "``$imjournalRatelimitBurst``" rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-131- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-144- rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst:145: "binary", "off", "no", "``$ImjournalIgnorePreviousMessages``" rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-146- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-159- rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst:160: "severity", "5", "no", "``$ImjournalDefaultSeverity``" rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-161- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-175- rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst:176: "facility", "LOG_USER", "no", "``$ImjournalDefaultFacility``" rsyslog-doc-8.2010.0/source/configuration/modules/imjournal.rst-177- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-51- rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst:52: "integer", "2", "no", "``$UDPServerTimeRequery``" rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-53- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-84- rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst:85: "word", "none", "no", "``$IMUDPSchedulingPolicy``" rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-86- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-100- rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst:101: "integer", "none", "no", "``$IMUDPSchedulingPriority``" rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-102- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-182- rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst:183: "string", "none", "no", "``$UDPServerAddress``" rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-184- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-196- rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst:197: "array", "514", "yes", "``$UDPServerRun``" rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-198- ############################################## rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-260- rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst:261: "string", "RSYSLOG_DefaultRuleset", "no", "``$InputUDPServerBindRuleset``" rsyslog-doc-8.2010.0/source/configuration/modules/imudp.rst-262- ############################################## rsyslog-doc-8.2010.0/source/configuration/templates.rst-455-option turned "on", property names are looked up as defined in the rsyslog-doc-8.2010.0/source/configuration/templates.rst:456:template. Use this option if you have JSON (``$!*``), local (``!.*``), rsyslog-doc-8.2010.0/source/configuration/templates.rst:457:or global (``$!\\*``) properties which contain uppercase letters. The rsyslog-doc-8.2010.0/source/configuration/templates.rst-458-normal Rsyslog properties are case-insensitive, so this option is not ############################################## rsyslog-doc-8.2010.0/source/configuration/templates.rst-706-**RSYSLOG_SysklogdFileFormat** - Sysklogd compatible log file format. If rsyslog-doc-8.2010.0/source/configuration/templates.rst:707:used with options: ``$SpaceLFOnReceive on``, rsyslog-doc-8.2010.0/source/configuration/templates.rst:708:``$EscapeControlCharactersOnReceive off``, ``$DropTrailingLFOnReception off``, rsyslog-doc-8.2010.0/source/configuration/templates.rst-709-the log format will conform to sysklogd log format. ############################################## rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_dirgroup.rst-17- rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_dirgroup.rst:18:``$DirGroup loggroup`` rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_dirgroup.rst-19- ############################################## rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_dirowner.rst-17- rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_dirowner.rst:18:``$DirOwner loguser`` rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_dirowner.rst-19- ############################################## rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_omfileforcechown.rst-65- rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_omfileforcechown.rst:66:``$FileOwner loguser $omfileForceChown on`` rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_omfileforcechown.rst-67- ############################################## rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_gssmode.rst-18- rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_gssmode.rst:19:``$GssMode Encryption`` rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_gssmode.rst-20- ############################################## rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_filegroup.rst-16- rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_filegroup.rst:17:``$FileGroup loggroup`` rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_filegroup.rst-18- ############################################## rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_filecreatemode.rst-25- rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_filecreatemode.rst:26:``$FileCreateMode 0600`` rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_filecreatemode.rst-27- ############################################## rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_fileowner.rst-17- rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_fileowner.rst:18:``$FileOwner loguser`` rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_fileowner.rst-19- ############################################## rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_gssforwardservicename.rst-19- rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_gssforwardservicename.rst:20:``$GssForwardServiceName rsyslog`` rsyslog-doc-8.2010.0/source/configuration/action/rsconf1_gssforwardservicename.rst-21- ############################################## rsyslog-doc-8.2010.0/source/configuration/actions.rst-320- rsyslog-doc-8.2010.0/source/configuration/actions.rst:321: ``$template DynFile,"/var/log/%HOSTNAME%/%programname%.log"`` rsyslog-doc-8.2010.0/source/configuration/actions.rst-322- ############################################## rsyslog-doc-8.2010.0/source/installation/index.rst-5- rsyslog-doc-8.2010.0/source/installation/index.rst:6:| ``$ sudo yum install rsyslog``, rsyslog-doc-8.2010.0/source/installation/index.rst:7:| ``$ sudo apt-get install rsyslog``, or rsyslog-doc-8.2010.0/source/installation/index.rst:8:| ``$ sudo apk add rsyslog`` rsyslog-doc-8.2010.0/source/installation/index.rst-9- ############################################## rsyslog-doc-8.2010.0/source/concepts/multi_ruleset.rst-103-explanation with configuration sample can be found at the rsyslog-doc-8.2010.0/source/concepts/multi_ruleset.rst:104::doc:`$RulesetParser <../configuration/ruleset/rsconf1_rulesetparser>` configuration directive. rsyslog-doc-8.2010.0/source/concepts/multi_ruleset.rst-105- ############################################## rsyslog-doc-8.2010.0/source/concepts/multi_ruleset.rst-310-activated via the rsyslog-doc-8.2010.0/source/concepts/multi_ruleset.rst:311::doc:`$RulesetCreateMainQueue <../configuration/ruleset/rsconf1_rulesetcreatemainqueue>` rsyslog-doc-8.2010.0/source/concepts/multi_ruleset.rst-312-directive. ############################################## rsyslog-doc-8.2010.0/source/concepts/messageparser.rst-212-specific ruleset. This is done by virtue of defining parsers via the rsyslog-doc-8.2010.0/source/concepts/messageparser.rst:213::doc:`$RulesetParser <../configuration/ruleset/rsconf1_rulesetparser>` rsyslog-doc-8.2010.0/source/concepts/messageparser.rst-214-configuration directive ############################################## rsyslog-doc-8.2010.0/source/concepts/messageparser.rst-252-is given as an actual in-depth example in the rsyslog-doc-8.2010.0/source/concepts/messageparser.rst:253:`$RulesetParser` configuration directive rsyslog-doc-8.2010.0/source/concepts/messageparser.rst-254-doc page. In short, it is accomplished by defining specific rulesets for ############################################## rsyslog-doc-8.2010.0/source/development/dev_testbench.rst-14-* the diag.sh framework supports auto-generation capabilities to support this: rsyslog-doc-8.2010.0/source/development/dev_testbench.rst:15: use `${RSYSLOG_DYNNAME}` a prefix for all files you generate. For the frequently rsyslog-doc-8.2010.0/source/development/dev_testbench.rst:16: used files, the framework already defines `${RSYSLOG_OUT_LOG}` and `${RSYSLOG_OUT_LOG2}` rsyslog-doc-8.2010.0/source/development/dev_testbench.rst-17- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/functions/rs-field.rst-23- When a single character is specified as string rsyslog-doc-8.2010.0/source/rainerscript/functions/rs-field.rst:24: ``field($msg, ",", 3)`` a string-based extraction is done, which is rsyslog-doc-8.2010.0/source/rainerscript/functions/rs-field.rst-25- more performance intensive than the equivalent single-character rsyslog-doc-8.2010.0/source/rainerscript/functions/rs-field.rst:26: ``field($msg, 44 ,3)`` extraction. rsyslog-doc-8.2010.0/source/rainerscript/functions/rs-field.rst-27- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/constant_strings.rst-45- rsyslog-doc-8.2010.0/source/rainerscript/constant_strings.rst:46: - `echo $VARNAME` - It will evaluate the environment variable and use rsyslog-doc-8.2010.0/source/rainerscript/constant_strings.rst-47- it as string constant. If the variable is not found, an empty string ############################################## rsyslog-doc-8.2010.0/source/rainerscript/constant_strings.rst-61- Note, however, that some common bash features are not supported. rsyslog-doc-8.2010.0/source/rainerscript/constant_strings.rst:62: Most importantly, `${VAR}` does not work. Also, environment variables rsyslog-doc-8.2010.0/source/rainerscript/constant_strings.rst-63- are only terminated by whitespace or `/`. Neither are things like rsyslog-doc-8.2010.0/source/rainerscript/constant_strings.rst:64: `$(pwd)` supported. The idea of this parameter is not to provide a rsyslog-doc-8.2010.0/source/rainerscript/constant_strings.rst-65- full-blown bash-equivalent, but provide some functionality that is ############################################## rsyslog-doc-8.2010.0/source/rainerscript/include.rst-11- rsyslog-doc-8.2010.0/source/rainerscript/include.rst:12: This configuration option deprecates the older ``$IncludeConfig`` rsyslog-doc-8.2010.0/source/rainerscript/include.rst-13- |FmtObsoleteName| format directive. ############################################## rsyslog-doc-8.2010.0/source/rainerscript/include.rst-127- rsyslog-doc-8.2010.0/source/rainerscript/include.rst:128: include(text=`echo $ENV_VAR`) rsyslog-doc-8.2010.0/source/rainerscript/include.rst-129- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/include.rst-135- rsyslog-doc-8.2010.0/source/rainerscript/include.rst:136: include(file=`echo $ENV_VAR`) rsyslog-doc-8.2010.0/source/rainerscript/include.rst-137- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/include.rst-150- include( rsyslog-doc-8.2010.0/source/rainerscript/include.rst:151: file=`echo $ENV_VAR` rsyslog-doc-8.2010.0/source/rainerscript/include.rst-152- mode="optional" ############################################## rsyslog-doc-8.2010.0/source/rainerscript/rainerscript_call_indirect.rst-30- rsyslog-doc-8.2010.0/source/rainerscript/rainerscript_call_indirect.rst:31:``call_indirect $syslogtag;`` rsyslog-doc-8.2010.0/source/rainerscript/rainerscript_call_indirect.rst-32- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/rainerscript_call_indirect.rst-40- rsyslog-doc-8.2010.0/source/rainerscript/rainerscript_call_indirect.rst:41:``call_indirect "changeme-" & $syslogtag;`` rsyslog-doc-8.2010.0/source/rainerscript/rainerscript_call_indirect.rst-42- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst-66- rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst:67:Say ``$.collection`` holds an array ``[1, "2", {"a": "b"}, 4]``, value rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst:68:of ``$.i`` across invocations would be ``1``, ``"2"``, ``{"a" : "b"}`` rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst-69-and ``4``. rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst-70- rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst:71:Note that ``$.collection`` must have been parsed from JSON (via mmjsonparse). rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst-72- rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst:73:When ``$.collection`` holds an object rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst:74:``{"a": "b", "c" : [1, 2, 3], "d" : {"foo": "bar"}}``, value of ``$.i`` rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst-75-across invocations would be ``{"key" : "a", "value" : "b"}``, ############################################## rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst-77-``{"key" : "d", "value" : {"foo" : "bar"}}`` (not necessarily in the that rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst:78:order). In this case key and value will need to be accessed as ``$.i!key`` rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst:79:and ``$.i!value`` respectively. rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst-80- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst-102-within foreach usually want to work with the variable loop populates (in the rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst:103:above example, ``$.quux`` and ``$.corge``) which causes message-mutation and rsyslog-doc-8.2010.0/source/rainerscript/control_structures.rst-104-async-action must see message as it was in a certain invocation of loop-body, ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-44- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:45: "word", "none", "no", "``$ActionQueueFileName``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-46- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-82- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:83: "integer", "1000/50000", "no", "``$ActionQueueSize``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-84- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-107- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:108: "integer", "128/1024", "no", "``$ActionQueueDequeueBatchSize``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-109- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-168- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:169: "integer", "0", "no", "``$ActionQueueMaxDiskSpace``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-170- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-183- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:184: "integer", "90% of queue.size", "no", "``$ActionQueueHighWaterMark``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-185- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-201- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:202: "integer", "70% of queue.size", "no", "``$ActionQueueLowWaterMark``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-203- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-261- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:262: "integer", "80% of queue.size", "no", "``$ActionQueueDiscardMark``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-263- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-276- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:277: "integer", "8", "no", "``$ActionQueueDiscardSeverity``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-278- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-292- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:293: "integer", "0", "no", "``$ActionQueueCheckpointInterval``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-294- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-311- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:312: "binary", "off", "no", "``$ActionQueueSyncQueueFiles``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-313- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-345- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:346: "word", "Direct", "no", "``$ActionQueueType``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-347- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-360- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:361: "integer", "1", "no", "``$ActionQueueWorkerThreads``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-362- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-373- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:374: "integer", "queue.size/queue.workerthreads", "no", "``$ActionQueueWorkerThreadMinimumMessages``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-375- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-389- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:390: "integer", "60000", "no", "``$ActionQueueTimeoutWorkerthreadShutdown``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-391- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-406- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:407: "integer", "10/1500", "no", "``$ActionQueueTimeoutShutdown``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-408- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-422- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:423: "integer", "1000", "no", "``$ActionQueueTimeoutActionCompletion``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-424- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-439- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:440: "integer", "2000", "no", "``$ActionQueueTimeoutEnqueue``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-441- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-495- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:496: "integer", "1m/16m", "no", "``$ActionQueueMaxFileSize``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-497- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-510- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:511: "binary", "off", "no", "``$ActionQueueSaveOnShutdown``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-512- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-523- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:524: "integer", "0", "no", "``$ActionQueueDequeueSlowDown``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-525- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-540- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:541: "integer", "0", "no", "``$ActionQueueDequeueTimeBegin``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-542- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-556- rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst:557: "integer", "25", "no", "``$ActionQueueDequeueTimeEnd``" rsyslog-doc-8.2010.0/source/rainerscript/queue_parameters.rst-558- ############################################## rsyslog-doc-8.2010.0/source/rainerscript/configuration_objects.rst-34- module(load="imptcp" rsyslog-doc-8.2010.0/source/rainerscript/configuration_objects.rst:35: config.enabled=`echo $LOAD_IMPTCP`) rsyslog-doc-8.2010.0/source/rainerscript/configuration_objects.rst-36- ############################################## rsyslog-doc-8.2010.0/source/tutorials/database.rst-167- rsyslog-doc-8.2010.0/source/tutorials/database.rst:168: ``$ModLoad ommysql`` rsyslog-doc-8.2010.0/source/tutorials/database.rst-169- ############################################## rsyslog-doc-8.2010.0/source/tutorials/database.rst-171- rsyslog-doc-8.2010.0/source/tutorials/database.rst:172: ``$ModLoad ompgsql`` rsyslog-doc-8.2010.0/source/tutorials/database.rst-173- ############################################## rsyslog-doc-8.2010.0/source/compatibility/v3compatibility.rst-109-<port>`` config file directives. You can now also set the local address rsyslog-doc-8.2010.0/source/compatibility/v3compatibility.rst:110:the server should listen to via ``$UDPServerAddress <ip>`` config rsyslog-doc-8.2010.0/source/compatibility/v3compatibility.rst-111-directive. ############################################## rsyslog-doc-8.2010.0/source/compatibility/v3compatibility.rst-121- rsyslog-doc-8.2010.0/source/compatibility/v3compatibility.rst:122:``$UDPServerAddress \*`` means listen on all local interfaces. This is the rsyslog-doc-8.2010.0/source/compatibility/v3compatibility.rst-123-default if no directive is specified. ############################################## rsyslog-doc-8.2010.0/source/compatibility/v3compatibility.rst-184-by default. In order to enable file syncing, the administrator must rsyslog-doc-8.2010.0/source/compatibility/v3compatibility.rst:185:specify ``$ActionFileEnableSync on`` at the top of rsyslog.conf. This rsyslog-doc-8.2010.0/source/compatibility/v3compatibility.rst-186-ensures that syncing only happens in some installations where the