rsyslog rules incorrectly processed when using $IncludeConfig
Issue
-
rsyslog has a problem using the $IncludeConfig directive in some cases.
See the following example of rsyslog configuration:
/etc/rsyslog.conflocal1.* /var/log/local1.log local2.* /var/log/local2.log $IncludeConfig /etc/rsyslog.conf.sub
/etc/rsyslog.conf.sublocal5.* /var/log/local5.log :fromhost-ip, isequal, "127.0.0.1" ~
When the following commands are issued, the local1 and local5 facility logs are recorded, but the local2 facility one is not:logger -p "local1.info" test logger -p "local2.info" test logger -p "local5.info" test
Environment
- Red Hat Enterprise Linux (RHEL) 6
- Red Hat Enterprise Linux (RHEL) 5 (rsyslog5 package)
- rsyslog
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.