journald to rsyslog paging issues
Clash Royale CLAN TAG#URR8PPP
up vote
1
down vote
favorite
I'm using rsyslog to dump journald entries to a log file so that they can be sent to Logstash. The issue I'm having is that some of the log lines are getting split across two lines.
When viewing them through journalctl I can use the --no-pager switch to disable this behavior but I haven't been able to find a way to enable this for the log lines being sent to rsyslog.
My journald configuration is just the default.
My rsyslog configuration for this particular program is as follows
$template cleanForm, "%msg%n"
$ActionFileDefaultTemplate cleanForm
if $programname == 'program-name' then /var/log/program-name.log
if $programname == 'program-name' then ~
rsyslog systemd-journald
asked Aug 16 at 17:02
Erik Feller
61
add a comment |Â
up vote
1
down vote
favorite
I'm using rsyslog to dump journald entries to a log file so that they can be sent to Logstash. The issue I'm having is that some of the log lines are getting split across two lines.
When viewing them through journalctl I can use the --no-pager switch to disable this behavior but I haven't been able to find a way to enable this for the log lines being sent to rsyslog.
My journald configuration is just the default.
My rsyslog configuration for this particular program is as follows
$template cleanForm, "%msg%n"
$ActionFileDefaultTemplate cleanForm
if $programname == 'program-name' then /var/log/program-name.log
if $programname == 'program-name' then ~
rsyslog systemd-journald
asked Aug 16 at 17:02
Erik Feller
61
What version of systemd? I don't know if this is your problem, but there was a patch to addLineMax=tojournald.confto not split incoming log streams at 2k bytes.
– meuh
Aug 16 at 17:58
@meuh I'm on systemd 229 and they added that flag in update 235 it looks like. I'm going to see if I can update and hopefully that will fix the issue. Thanks!
– Erik Feller
Aug 16 at 19:12
add a comment |Â
up vote
1
down vote
favorite
up vote
1
down vote
favorite
I'm using rsyslog to dump journald entries to a log file so that they can be sent to Logstash. The issue I'm having is that some of the log lines are getting split across two lines.
When viewing them through journalctl I can use the --no-pager switch to disable this behavior but I haven't been able to find a way to enable this for the log lines being sent to rsyslog.
My journald configuration is just the default.
My rsyslog configuration for this particular program is as follows
$template cleanForm, "%msg%n"
$ActionFileDefaultTemplate cleanForm
if $programname == 'program-name' then /var/log/program-name.log
if $programname == 'program-name' then ~
rsyslog systemd-journald
asked Aug 16 at 17:02
Erik Feller
61
I'm using rsyslog to dump journald entries to a log file so that they can be sent to Logstash. The issue I'm having is that some of the log lines are getting split across two lines.
When viewing them through journalctl I can use the --no-pager switch to disable this behavior but I haven't been able to find a way to enable this for the log lines being sent to rsyslog.
My journald configuration is just the default.
My rsyslog configuration for this particular program is as follows
$template cleanForm, "%msg%n"
$ActionFileDefaultTemplate cleanForm
if $programname == 'program-name' then /var/log/program-name.log
if $programname == 'program-name' then ~
rsyslog systemd-journald
rsyslog systemd-journald
asked Aug 16 at 17:02
Erik Feller
61
asked Aug 16 at 17:02
Erik Feller
61
asked Aug 16 at 17:02
Erik Feller
61
asked Aug 16 at 17:02
Erik Feller
61
asked Aug 16 at 17:02
Erik Feller
61
61
What version of systemd? I don't know if this is your problem, but there was a patch to addLineMax=tojournald.confto not split incoming log streams at 2k bytes.
– meuh
Aug 16 at 17:58
@meuh I'm on systemd 229 and they added that flag in update 235 it looks like. I'm going to see if I can update and hopefully that will fix the issue. Thanks!
– Erik Feller
Aug 16 at 19:12
add a comment |Â
What version of systemd? I don't know if this is your problem, but there was a patch to addLineMax=tojournald.confto not split incoming log streams at 2k bytes.
– meuh
Aug 16 at 17:58
@meuh I'm on systemd 229 and they added that flag in update 235 it looks like. I'm going to see if I can update and hopefully that will fix the issue. Thanks!
– Erik Feller
Aug 16 at 19:12
What version of systemd? I don't know if this is your problem, but there was a patch to add
LineMax= to journald.conf to not split incoming log streams at 2k bytes.– meuh
Aug 16 at 17:58
What version of systemd? I don't know if this is your problem, but there was a patch to add
LineMax= to journald.conf to not split incoming log streams at 2k bytes.– meuh
Aug 16 at 17:58
@meuh I'm on systemd 229 and they added that flag in update 235 it looks like. I'm going to see if I can update and hopefully that will fix the issue. Thanks!
– Erik Feller
Aug 16 at 19:12
@meuh I'm on systemd 229 and they added that flag in update 235 it looks like. I'm going to see if I can update and hopefully that will fix the issue. Thanks!
– Erik Feller
Aug 16 at 19:12
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f463023%2fjournald-to-rsyslog-paging-issues%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
What version of systemd? I don't know if this is your problem, but there was a patch to add
LineMax=tojournald.confto not split incoming log streams at 2k bytes.– meuh
Aug 16 at 17:58
@meuh I'm on systemd 229 and they added that flag in update 235 it looks like. I'm going to see if I can update and hopefully that will fix the issue. Thanks!
– Erik Feller
Aug 16 at 19:12