mirror of
https://github.com/rsyslog/rsyslog.git
synced 2025-12-19 09:10:42 +01:00
0fa3e9249d
this causes all libfaketime tests to fail, due to unset environment variable (which is set in init). Previously this was no problem because the environment variable did not exist in any case. Thus the problem went undetected for a long time.
71 lines
3.4 KiB
Bash
Executable File
71 lines
3.4 KiB
Bash
Executable File
#!/bin/bash
|
|
# add 2016-11-22 by Pascal Withopf, released under ASL 2.0
|
|
. $srcdir/diag.sh init
|
|
. $srcdir/faketime_common.sh
|
|
|
|
export TZ=TEST+02:00
|
|
|
|
. $srcdir/diag.sh generate-conf
|
|
. $srcdir/diag.sh add-conf '
|
|
module(load="../plugins/imtcp/.libs/imtcp")
|
|
module(load="../plugins/mmnormalize/.libs/mmnormalize")
|
|
input(type="imtcp" port="13514" ruleset="ruleset1")
|
|
|
|
template(name="t_file_record" type="string" string="%timestamp:::date-rfc3339% %timestamp:::date-rfc3339% %hostname% %$!v_tag% %$!v_msg%\n")
|
|
template(name="t_file_path" type="string" string="/sb/logs/incoming/%$year%/%$month%/%$day%/svc_%$!v_svc%/ret_%$!v_ret%/os_%$!v_os%/%fromhost-ip%/r_relay1/%$!v_file:::lowercase%.gz\n")
|
|
|
|
template(name="t_fromhost-ip" type="string" string="%fromhost-ip%")
|
|
template(name="t_analytics_msg_default" type="string" string="%$!v_analytics_prefix%%rawmsg-after-pri%")
|
|
template(name="t_analytics_tag_prefix" type="string" string="%$!v_tag%: ")
|
|
template(name="t_analytics_msg_normalized" type="string" string="%timereported% %$!v_hostname% %$!v_analytics_prefix%%$!v_msg%")
|
|
template(name="t_analytics_msg_normalized_vc" type="string" string="%timereported:1:6% %$year% %timereported:8:$% %$!v_hostname% %$!v_analytics_prefix%%$!v_msg%")
|
|
template(name="t_analytics" type="string" string="[][][%$!v_fromhost-ip%][%timestamp:::date-unixtimestamp%][] %$!v_analytics_msg%\n")
|
|
|
|
ruleset(name="ruleset1") {
|
|
action(type="mmnormalize" rulebase="testsuites/mmnormalize_processing_tests.rulebase" useRawMsg="on")
|
|
if ($!v_file == "") then {
|
|
set $!v_file=$!v_tag;
|
|
}
|
|
action(type="omfile" File="rsyslog.out.log" template="t_file_record")
|
|
action(type="omfile" File="rsyslog.out.log" template="t_file_path")
|
|
|
|
set $!v_forward="PCI";
|
|
|
|
if ($!v_forward contains "PCI") then {
|
|
if ($!v_fromhost-ip == "") then {
|
|
set $!v_fromhost-ip=exec_template("t_fromhost-ip");
|
|
}
|
|
if ($!v_msg == "" or $!v_tag == "") then {
|
|
set $!v_analytics_msg=exec_template("t_analytics_msg_default");
|
|
} else {
|
|
if ($!v_analytics_prefix == "") then {
|
|
set $!v_analytics_prefix=exec_template("t_analytics_tag_prefix");
|
|
}
|
|
if ($!v_hostname == "") then { # needed for vCenter logs with custom hostname
|
|
set $!v_hostname=exec_template("t_fromhost-ip");
|
|
}
|
|
if ($!v_exception == "VC") then {
|
|
set $!v_analytics_msg=exec_template("t_analytics_msg_normalized_vc");
|
|
} else {
|
|
set $!v_analytics_msg=exec_template("t_analytics_msg_normalized");
|
|
}
|
|
}
|
|
action(type="omfile" File="rsyslog.out.log" template="t_analytics")
|
|
}
|
|
}
|
|
'
|
|
FAKETIME='2017-03-08 12:53:47' $srcdir/diag.sh startup
|
|
. $srcdir/diag.sh tcpflood -m1 -M "\"<37>1 2017-03-08T12:53:47+02:00 Host1.domain.com Security - - - SER1 M01 WIN [AUF] Wed Mar 08 11:53:48 2017: N\A/Security/Host1.domain.com/Microsoft-Windows-Security-Auditing (5152) - message\""
|
|
. $srcdir/diag.sh shutdown-when-empty
|
|
. $srcdir/diag.sh wait-shutdown
|
|
echo '2017-03-08T12:53:47+02:00 2017-03-08T12:53:47+02:00 Host1.domain.com Security [AUF] Wed Mar 08 11:53:48 2017: N\A/Security/Host1.domain.com/Microsoft-Windows-Security-Auditing (5152) - message
|
|
/sb/logs/incoming/2017/03/08/svc_SER1/ret_M01/os_WIN/127.0.0.1/r_relay1/security.gz
|
|
[][][127.0.0.1][1488970427][] Mar 8 12:53:47 127.0.0.1 EvntSLog: [AUF] Wed Mar 08 11:53:48 2017: N\A/Security/Host1.domain.com/Microsoft-Windows-Security-Auditing (5152) - message' | cmp rsyslog.out.log
|
|
if [ ! $? -eq 0 ]; then
|
|
echo "invalid response generated, rsyslog.out.log is:"
|
|
cat rsyslog.out.log
|
|
. $srcdir/diag.sh error-exit 1
|
|
fi;
|
|
|
|
. $srcdir/diag.sh exit
|