rsyslog rules incorrectly processed when using $IncludeConfig

Solution Verified - Updated -

Issue

  • rsyslog has a problem using the $IncludeConfig directive in some cases.

    See the following example of rsyslog configuration:
        
    /etc/rsyslog.conf

    local1.* /var/log/local1.log
local2.* /var/log/local2.log
$IncludeConfig /etc/rsyslog.conf.sub

        
    /etc/rsyslog.conf.sub

    local5.* /var/log/local5.log
:fromhost-ip, isequal, "127.0.0.1" ~

        
    When the following commands are issued, the local1 and local5 facility logs are recorded, but the local2 facility one is not:

     logger -p "local1.info" test
 logger -p "local2.info" test
 logger -p "local5.info" test

Environment

  • Red Hat Enterprise Linux (RHEL) 6
  • Red Hat Enterprise Linux (RHEL) 5 (rsyslog5 package)
  • rsyslog

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.