Skip to content

Instantly share code, notes, and snippets.

@masteinhauser
Last active August 29, 2015 14:10
Show Gist options
  • Save masteinhauser/e7abcf594d77de64544c to your computer and use it in GitHub Desktop.
Save masteinhauser/e7abcf594d77de64544c to your computer and use it in GitHub Desktop.
rsyslog debug
~# /usr/sbin/rsyslogd -dn -f /etc/rsyslog.conf -i /var/run/rsyslog.pid 2>&1 > /tmp/rsyslog.debug
Cleanup: popping token $end ()
Cleanup: popping nterm conf ()
rsyslogd: error writing pid file
rsyslogd: run failed with error -3000 (see rsyslog.h or try http://www.rsyslog.com/e/3000 to learn what that number means)
6248.387334605:main thread : rsyslogd 8.6.0 startup, module path '', cwd:/root
6248.387695518:main thread : caller requested object 'net', not found (iRet -3003)
6248.387724726:main thread : Requested to load module 'lmnet'
6248.387746029:main thread : loading module '/usr/lib/rsyslog/lmnet.so'
6248.387978414:main thread : module lmnet of type 2 being loaded (keepType=0).
6248.387995016:main thread : entry point 'isCompatibleWithFeature' not present in module
6248.388006471:main thread : entry point 'setModCnf' not present in module
6248.388018131:main thread : entry point 'getModCnfName' not present in module
6248.388029505:main thread : entry point 'beginCnfLoad' not present in module
6248.388043969:main thread : source file conf.c requested reference for module 'lmnet', reference count now 1
6248.388105246:main thread : rsyslog runtime initialized, version 8.6.0, current users 1
6248.388210473:main thread : source file rsyslogd.c requested reference for module 'lmnet', reference count now 2
6248.388899962:main thread : GenerateLocalHostName uses 'test-controller-0'
6248.388923568:main thread : deque option n, optarg ''
6248.388935812:main thread : deque option f, optarg '/etc/rsyslog.conf'
6248.388947201:main thread : deque option i, optarg '/var/run/rsyslog.pid'
6248.388979857:main thread : omfile: using transactional output interface.
6248.389054614:main thread : module builtin:omfile of type 1 being loaded (keepType=0).
6248.389069559:main thread : module config name is 'omfile'
6248.389081574:main thread : module builtin:omfile supports rsyslog v6 config interface
6248.389096327:main thread : entry point 'activateCnfPrePrivDrop' not present in module
6248.389111508:main thread : entry point 'SetShutdownImmdtPtr' not present in module
6248.389123326:main thread : entry point 'doAction' not present in module
6248.389135217:main thread : entry point 'endTransaction' not present in module
6248.389151808:main thread : module builtin:ompipe of type 1 being loaded (keepType=0).
6248.389165371:main thread : module config name is 'ompipe'
6248.389177282:main thread : module builtin:ompipe supports rsyslog v6 config interface
6248.389191311:main thread : entry point 'activateCnfPrePrivDrop' not present in module
6248.389205303:main thread : entry point 'SetShutdownImmdtPtr' not present in module
6248.389216951:main thread : entry point 'beginTransaction' not present in module
6248.389229266:main thread : entry point 'commitTransaction' not present in module
6248.389240697:main thread : entry point 'endTransaction' not present in module
6248.389260436:main thread : module builtin-shell of type 1 being loaded (keepType=0).
6248.389272506:main thread : entry point 'setModCnf' not present in module
6248.389283804:main thread : entry point 'getModCnfName' not present in module
6248.389295302:main thread : entry point 'beginCnfLoad' not present in module
6248.389334628:main thread : entry point 'doHUP' not present in module
6248.389346651:main thread : entry point 'SetShutdownImmdtPtr' not present in module
6248.389357920:main thread : entry point 'beginTransaction' not present in module
6248.389369499:main thread : entry point 'commitTransaction' not present in module
6248.389380708:main thread : entry point 'endTransaction' not present in module
6248.389391803:main thread : entry point 'newActInst' not present in module
6248.389410602:main thread : module builtin:omdiscard of type 1 being loaded (keepType=0).
6248.389422810:main thread : entry point 'setModCnf' not present in module
6248.389434189:main thread : entry point 'getModCnfName' not present in module
6248.389445371:main thread : entry point 'beginCnfLoad' not present in module
6248.389458455:main thread : entry point 'doHUP' not present in module
6248.389469853:main thread : entry point 'SetShutdownImmdtPtr' not present in module
6248.389480951:main thread : entry point 'beginTransaction' not present in module
6248.389492274:main thread : entry point 'commitTransaction' not present in module
6248.389519071:main thread : entry point 'endTransaction' not present in module
6248.389530964:main thread : entry point 'newActInst' not present in module
6248.389555026:main thread : source file omfwd.c requested reference for module 'lmnet', reference count now 3
6248.389596390:main thread : module builtin:omfwd of type 1 being loaded (keepType=0).
6248.389610374:main thread : module config name is 'omfwd'
6248.389622184:main thread : module builtin:omfwd supports rsyslog v6 config interface
6248.389636144:main thread : entry point 'activateCnfPrePrivDrop' not present in module
6248.389649893:main thread : entry point 'doHUP' not present in module
6248.389661420:main thread : entry point 'SetShutdownImmdtPtr' not present in module
6248.389672984:main thread : entry point 'doAction' not present in module
6248.389684683:main thread : entry point 'endTransaction' not present in module
6248.389700895:main thread : module builtin:omusrmsg of type 1 being loaded (keepType=0).
6248.389713370:main thread : entry point 'setModCnf' not present in module
6248.389725155:main thread : module config name is 'omusrmsg'
6248.389736737:main thread : entry point 'beginCnfLoad' not present in module
6248.389750325:main thread : entry point 'doHUP' not present in module
6248.389761834:main thread : entry point 'SetShutdownImmdtPtr' not present in module
6248.389773191:main thread : entry point 'beginTransaction' not present in module
6248.389784835:main thread : entry point 'commitTransaction' not present in module
6248.389796169:main thread : entry point 'endTransaction' not present in module
6248.389813180:main thread : rfc5424 parser init called
6248.389824983:main thread : GetParserName addr 0x44e440
6248.389837480:main thread : module builtin:pmrfc5424 of type 3 being loaded (keepType=0).
6248.389849351:main thread : entry point 'setModCnf' not present in module
6248.389860437:main thread : entry point 'getModCnfName' not present in module
6248.389871454:main thread : entry point 'beginCnfLoad' not present in module
6248.389882408:main thread : entry point 'parse2' not present in module
6248.389899927:main thread : DDDDD: added parser 'rsyslog.rfc5424' to list 0x68eea8
6248.389911269:main thread : Parser 'rsyslog.rfc5424' added to list of available parsers.
6248.389930904:main thread : rfc3164 parser init called
6248.389943180:main thread : module builtin:pmrfc3164 of type 3 being loaded (keepType=0).
6248.389954621:main thread : entry point 'setModCnf' not present in module
6248.389965600:main thread : entry point 'getModCnfName' not present in module
6248.389976464:main thread : entry point 'beginCnfLoad' not present in module
6248.389987268:main thread : entry point 'parse2' not present in module
6248.389999875:main thread : DDDDD: added parser 'rsyslog.rfc3164' to list 0x68eea8
6248.390010822:main thread : Parser 'rsyslog.rfc3164' added to list of available parsers.
6248.390112948:main thread : DDDDD: added parser 'rsyslog.rfc5424' to list 0x68eea0
6248.390130411:main thread : Parser 'rsyslog.rfc5424' added to default parser set.
6248.390143703:main thread : DDDDD: added parser 'rsyslog.rfc3164' to list 0x68eea0
6248.390154875:main thread : Parser 'rsyslog.rfc3164' added to default parser set.
6248.390167181:main thread : rsyslog standard file format strgen init called, compiled with version 8.6.0
6248.390179747:main thread : module builtin:smfile of type 4 being loaded (keepType=0).
6248.390191308:main thread : entry point 'isCompatibleWithFeature' not present in module
6248.390202821:main thread : entry point 'setModCnf' not present in module
6248.390214030:main thread : entry point 'getModCnfName' not present in module
6248.390225185:main thread : entry point 'beginCnfLoad' not present in module
6248.390240457:main thread : Strgen 'RSYSLOG_FileFormat' added to list of available strgens.
6248.390260764:main thread : traditional file format strgen init called, compiled with version 8.6.0
6248.390285381:main thread : module builtin:smtradfile of type 4 being loaded (keepType=0).
6248.390297300:main thread : entry point 'isCompatibleWithFeature' not present in module
6248.390308556:main thread : entry point 'setModCnf' not present in module
6248.390319767:main thread : entry point 'getModCnfName' not present in module
6248.390331037:main thread : entry point 'beginCnfLoad' not present in module
6248.390343997:main thread : Strgen 'RSYSLOG_TraditionalFileFormat' added to list of available strgens.
6248.390356975:main thread : rsyslog standard (network) forward format strgen init called, compiled with version 8.6.0
6248.390369573:main thread : module builtin:smfwd of type 4 being loaded (keepType=0).
6248.390380976:main thread : entry point 'isCompatibleWithFeature' not present in module
6248.390391980:main thread : entry point 'setModCnf' not present in module
6248.390402811:main thread : entry point 'getModCnfName' not present in module
6248.390413728:main thread : entry point 'beginCnfLoad' not present in module
6248.390426248:main thread : Strgen 'RSYSLOG_ForwardFormat' added to list of available strgens.
6248.390439246:main thread : rsyslog traditional (network) forward format strgen init called, compiled with version 8.6.0
6248.390451395:main thread : module builtin:smtradfwd of type 4 being loaded (keepType=0).
6248.390462945:main thread : entry point 'isCompatibleWithFeature' not present in module
6248.390473956:main thread : entry point 'setModCnf' not present in module
6248.390485163:main thread : entry point 'getModCnfName' not present in module
6248.390496249:main thread : entry point 'beginCnfLoad' not present in module
6248.390509948:main thread : Strgen 'RSYSLOG_TraditionalForwardFormat' added to list of available strgens.
6248.390526020:main thread : doing legacy config system init
6248.390719533:main thread : tplAddLine processing template 'RSYSLOG_DebugFormat'
6248.390808081:main thread : tplAddLine processing template 'RSYSLOG_SyslogProtocol23Format'
6248.390842292:main thread : tplAddLine processing template 'RSYSLOG_FileFormat'
6248.390855617:main thread : template bound to strgen 'RSYSLOG_FileFormat'
6248.390870063:main thread : tplAddLine processing template 'RSYSLOG_TraditionalFileFormat'
6248.390882280:main thread : template bound to strgen 'RSYSLOG_TraditionalFileFormat'
6248.390894065:main thread : tplAddLine processing template ' WallFmt'
6248.390919860:main thread : tplAddLine processing template 'RSYSLOG_ForwardFormat'
6248.390932270:main thread : template bound to strgen 'RSYSLOG_ForwardFormat'
6248.390944548:main thread : tplAddLine processing template 'RSYSLOG_TraditionalForwardFormat'
6248.390957243:main thread : template bound to strgen 'RSYSLOG_TraditionalForwardFormat'
6248.390969036:main thread : tplAddLine processing template ' StdUsrMsgFmt'
6248.390984209:main thread : tplAddLine processing template ' StdDBFmt'
6248.391023466:main thread : tplAddLine processing template 'RSYSLOG_SysklogdFileFormat'
6248.391043303:main thread : tplAddLine processing template ' StdPgSQLFmt'
6248.391076232:main thread : tplAddLine processing template ' StdJSONFmt'
6248.391110331:main thread : tplAddLine processing template 'RSYSLOG_omudpspoofDfltSourceTpl'
6248.391233871:main thread : config parser: pushed file /etc/rsyslog.conf on top of stack
6248.391629124:main thread : cnf:global:cfsysline: $ModLoad imuxsock # provides support for local system logging
6248.391655680:main thread : Requested to load module 'imuxsock'
6248.391670211:main thread : loading module '/usr/lib/rsyslog/imuxsock.so'
6248.391879114:main thread : imuxsock version 8.6.0 initializing
6248.391895634:main thread : rsyslog/glbl: using '127.0.0.1' as localhost IP
6248.392019443:main thread : module imuxsock of type 0 being loaded (keepType=0).
6248.392038000:main thread : module config name is 'imuxsock'
6248.392049621:main thread : module imuxsock supports rsyslog v6 config interface
6248.392085539:main thread : cnf:global:cfsysline: $ModLoad imklog # provides kernel logging support (previously done by rklogd)
6248.392101283:main thread : Requested to load module 'imklog'
6248.392114050:main thread : loading module '/usr/lib/rsyslog/imklog.so'
6248.392334344:main thread : module imklog of type 0 being loaded (keepType=0).
6248.392351176:main thread : entry point 'isCompatibleWithFeature' not present in module
6248.392364265:main thread : module config name is 'imklog'
6248.392375921:main thread : module imklog supports rsyslog v6 config interface
6248.392390511:main thread : entry point 'newInpInst' not present in module
6248.392423347:main thread : cnf:global:cfsysline: $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
6248.392440960:main thread : doGetWord: get newval 'RSYSLOG_TraditionalFileFormat' (len 29), hdlr 0x44b120
6248.392459649:main thread : cnf:global:cfsysline: $RepeatedMsgReduction on
6248.392478377:main thread : cnf:global:cfsysline: $FileOwner syslog
6248.393143106:main thread : uid 101 obtained for user 'syslog'
6248.393162543:main thread : cnf:global:cfsysline: $FileGroup adm
6248.393294556:main thread : gid 4 obtained for group 'adm'
6248.393341250:main thread : cnf:global:cfsysline: $FileCreateMode 0640
6248.393359129:main thread : cnf:global:cfsysline: $DirCreateMode 0755
6248.393374800:main thread : cnf:global:cfsysline: $Umask 0022
6248.393391080:main thread : cnf:global:cfsysline: $PrivDropToUser syslog
6248.393450742:main thread : uid 101 obtained for user 'syslog'
6248.393466390:main thread : cnf:global:cfsysline: $PrivDropToGroup syslog
6248.393524906:main thread : gid 103 obtained for group 'syslog'
6248.393546479:main thread : cnf:global:cfsysline: $WorkDirectory /var/spool/rsyslog
6248.393561130:main thread : doGetWord: get newval '/var/spool/rsyslog' (len 18), hdlr 0x410240
6248.393710935:main thread : requested to include config file '/etc/rsyslog.d/postfix.conf'
6248.393773118:main thread : config parser: pushed file /etc/rsyslog.d/postfix.conf on top of stack
6248.393789490:main thread : requested to include config file '/etc/rsyslog.d/50-default.conf'
6248.393877101:main thread : config parser: pushed file /etc/rsyslog.d/50-default.conf on top of stack
6248.393893265:main thread : requested to include config file '/etc/rsyslog.d/21-cloudinit.conf'
6248.393949476:main thread : config parser: pushed file /etc/rsyslog.d/21-cloudinit.conf on top of stack
6248.393965626:main thread : requested to include config file '/etc/rsyslog.d/20-ufw.conf'
6248.394019135:main thread : config parser: pushed file /etc/rsyslog.d/20-ufw.conf on top of stack
6248.394131209:main thread : lexer: propfilt is ':msg,contains,"[UFW "'
6248.394758774:main thread : tried selector action for builtin:omfile: 0
6248.394772991:main thread : Module builtin:omfile processes this action.
6248.394796955:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.394834880:main thread : action 1 queue: parameter dump:
6248.394846875:main thread : action 1 queue: queue.filename '[NONE]'
6248.394858577:main thread : action 1 queue: queue.size: 1000
6248.394870230:main thread : action 1 queue: queue.dequeuebatchsize: 16
6248.394881964:main thread : action 1 queue: queue.maxdiskspace: 0
6248.394893607:main thread : action 1 queue: queue.highwatermark: -1
6248.394905201:main thread : action 1 queue: queue.lowwatermark: -1
6248.394916805:main thread : action 1 queue: queue.fulldelaymark: -1
6248.394928038:main thread : action 1 queue: queue.lightdelaymark: -1
6248.394939348:main thread : action 1 queue: queue.discardmark: 980
6248.394950574:main thread : action 1 queue: queue.discardseverity: 8
6248.394961813:main thread : action 1 queue: queue.checkpointinterval: 0
6248.394973078:main thread : action 1 queue: queue.syncqueuefiles: 0
6248.394984527:main thread : action 1 queue: queue.type: 3 [Direct]
6248.395010460:main thread : action 1 queue: queue.workerthreads: 1
6248.395022413:main thread : action 1 queue: queue.timeoutshutdown: 0
6248.395037701:main thread : action 1 queue: queue.timeoutactioncompletion: 1000
6248.395048949:main thread : action 1 queue: queue.timeoutenqueue: 50
6248.395060279:main thread : action 1 queue: queue.timeoutworkerthreadshutdown: 60000
6248.395071514:main thread : action 1 queue: queue.workerthreadminimummessages: -1
6248.395082948:main thread : action 1 queue: queue.maxfilesize: 1048576
6248.395094290:main thread : action 1 queue: queue.saveonshutdown: 1
6248.395105165:main thread : action 1 queue: queue.dequeueslowdown: 0
6248.395115997:main thread : action 1 queue: queue.dequeuetimebegin: 0
6248.395127095:main thread : action 1 queue: queue.dequeuetimeend: 25
6248.395138689:main thread : Action 0x2002070: queue 0x2002420 created
6248.395770060:main thread : config parser: reached end of file /etc/rsyslog.d/20-ufw.conf
6248.395784745:main thread : config parser: resume parsing of file /etc/rsyslog.d/21-cloudinit.conf at line 1
6248.395800176:main thread : lexer: propfilt is ':syslogtag, isequal, "[CLOUDINIT]"'
6248.396719774:main thread : Decoding property-based filter ':msg,contains,"[UFW "'
6248.397145098:main thread : cnf:global:script
6248.397665540:main thread : tried selector action for builtin:omfile: 0
6248.397673126:main thread : Module builtin:omfile processes this action.
6248.397681434:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.397691413:main thread : action 2 queue: parameter dump:
6248.397698098:main thread : action 2 queue: queue.filename '[NONE]'
6248.397704779:main thread : action 2 queue: queue.size: 1000
6248.397711937:main thread : action 2 queue: queue.dequeuebatchsize: 16
6248.397718480:main thread : action 2 queue: queue.maxdiskspace: 0
6248.397724910:main thread : action 2 queue: queue.highwatermark: -1
6248.397731336:main thread : action 2 queue: queue.lowwatermark: -1
6248.397737697:main thread : action 2 queue: queue.fulldelaymark: -1
6248.397744109:main thread : action 2 queue: queue.lightdelaymark: -1
6248.397750550:main thread : action 2 queue: queue.discardmark: 980
6248.397756941:main thread : action 2 queue: queue.discardseverity: 8
6248.397763282:main thread : action 2 queue: queue.checkpointinterval: 0
6248.397769733:main thread : action 2 queue: queue.syncqueuefiles: 0
6248.397776262:main thread : action 2 queue: queue.type: 3 [Direct]
6248.397782775:main thread : action 2 queue: queue.workerthreads: 1
6248.397789231:main thread : action 2 queue: queue.timeoutshutdown: 0
6248.397795580:main thread : action 2 queue: queue.timeoutactioncompletion: 1000
6248.397802034:main thread : action 2 queue: queue.timeoutenqueue: 50
6248.397808591:main thread : action 2 queue: queue.timeoutworkerthreadshutdown: 60000
6248.397815108:main thread : action 2 queue: queue.workerthreadminimummessages: -1
6248.397821568:main thread : action 2 queue: queue.maxfilesize: 1048576
6248.397827990:main thread : action 2 queue: queue.saveonshutdown: 1
6248.397834418:main thread : action 2 queue: queue.dequeueslowdown: 0
6248.397840860:main thread : action 2 queue: queue.dequeuetimebegin: 0
6248.397847242:main thread : action 2 queue: queue.dequeuetimeend: 25
6248.397853924:main thread : Action 0x2001500: queue 0x20018f0 created
6248.398538980:main thread : tried selector action for builtin:omfile: -2001
6248.398550215:main thread : tried selector action for builtin:ompipe: -2001
6248.398557784:main thread : tried selector action for builtin-shell: -2001
6248.398564477:main thread : discard
6248.398571857:main thread : Called LogMsg, msg: warning: ~ action is deprecated, consider using the 'stop' statement instead
6248.398696727:main thread : tried selector action for builtin:omdiscard: 0
6248.398705383:main thread : Module builtin:omdiscard processes this action.
6248.399101128:main thread : config parser: reached end of file /etc/rsyslog.d/21-cloudinit.conf
6248.399109487:main thread : config parser: resume parsing of file /etc/rsyslog.d/50-default.conf at line 1
6248.399623956:main thread : Decoding property-based filter ':syslogtag, isequal, "[CLOUDINIT]"'
6248.399834646:main thread : cnf:global:script
6248.400232972:main thread : tried selector action for builtin:omfile: 0
6248.400240389:main thread : Module builtin:omfile processes this action.
6248.400248735:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.400259783:main thread : action 4 queue: parameter dump:
6248.400266375:main thread : action 4 queue: queue.filename '[NONE]'
6248.400273122:main thread : action 4 queue: queue.size: 1000
6248.400279829:main thread : action 4 queue: queue.dequeuebatchsize: 16
6248.400286479:main thread : action 4 queue: queue.maxdiskspace: 0
6248.400293257:main thread : action 4 queue: queue.highwatermark: -1
6248.400299931:main thread : action 4 queue: queue.lowwatermark: -1
6248.400306621:main thread : action 4 queue: queue.fulldelaymark: -1
6248.400313099:main thread : action 4 queue: queue.lightdelaymark: -1
6248.400319831:main thread : action 4 queue: queue.discardmark: 980
6248.400326486:main thread : action 4 queue: queue.discardseverity: 8
6248.400332952:main thread : action 4 queue: queue.checkpointinterval: 0
6248.400339617:main thread : action 4 queue: queue.syncqueuefiles: 0
6248.400346314:main thread : action 4 queue: queue.type: 3 [Direct]
6248.400352938:main thread : action 4 queue: queue.workerthreads: 1
6248.400359509:main thread : action 4 queue: queue.timeoutshutdown: 0
6248.400366204:main thread : action 4 queue: queue.timeoutactioncompletion: 1000
6248.400373045:main thread : action 4 queue: queue.timeoutenqueue: 50
6248.400379733:main thread : action 4 queue: queue.timeoutworkerthreadshutdown: 60000
6248.400386371:main thread : action 4 queue: queue.workerthreadminimummessages: -1
6248.400392845:main thread : action 4 queue: queue.maxfilesize: 1048576
6248.400399270:main thread : action 4 queue: queue.saveonshutdown: 1
6248.400405776:main thread : action 4 queue: queue.dequeueslowdown: 0
6248.400412328:main thread : action 4 queue: queue.dequeuetimebegin: 0
6248.400418905:main thread : action 4 queue: queue.dequeuetimeend: 25
6248.400425747:main thread : Action 0x20003d0: queue 0x2000780 created
6248.401020069:main thread : Decoding traditional PRI filter 'auth,authpriv.*'
6248.401028412:main thread : symbolic name: * ==> 255
6248.401044518:main thread : symbolic name: auth ==> 32
6248.401056682:main thread : symbolic name: authpriv ==> 80
6248.401216291:main thread : cnf:global:script
6248.401509657:main thread : tried selector action for builtin:omfile: 0
6248.401516797:main thread : Module builtin:omfile processes this action.
6248.401524954:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.401535208:main thread : action 5 queue: parameter dump:
6248.401542137:main thread : action 5 queue: queue.filename '[NONE]'
6248.401548840:main thread : action 5 queue: queue.size: 1000
6248.401555460:main thread : action 5 queue: queue.dequeuebatchsize: 16
6248.401561985:main thread : action 5 queue: queue.maxdiskspace: 0
6248.401568482:main thread : action 5 queue: queue.highwatermark: -1
6248.401574943:main thread : action 5 queue: queue.lowwatermark: -1
6248.401581418:main thread : action 5 queue: queue.fulldelaymark: -1
6248.401587832:main thread : action 5 queue: queue.lightdelaymark: -1
6248.401594334:main thread : action 5 queue: queue.discardmark: 980
6248.401600705:main thread : action 5 queue: queue.discardseverity: 8
6248.401607199:main thread : action 5 queue: queue.checkpointinterval: 0
6248.401613622:main thread : action 5 queue: queue.syncqueuefiles: 0
6248.401620249:main thread : action 5 queue: queue.type: 3 [Direct]
6248.401626701:main thread : action 5 queue: queue.workerthreads: 1
6248.401641159:main thread : action 5 queue: queue.timeoutshutdown: 0
6248.401647969:main thread : action 5 queue: queue.timeoutactioncompletion: 1000
6248.401654577:main thread : action 5 queue: queue.timeoutenqueue: 50
6248.401661207:main thread : action 5 queue: queue.timeoutworkerthreadshutdown: 60000
6248.401667752:main thread : action 5 queue: queue.workerthreadminimummessages: -1
6248.401674299:main thread : action 5 queue: queue.maxfilesize: 1048576
6248.401680749:main thread : action 5 queue: queue.saveonshutdown: 1
6248.401687114:main thread : action 5 queue: queue.dequeueslowdown: 0
6248.401693472:main thread : action 5 queue: queue.dequeuetimebegin: 0
6248.401699846:main thread : action 5 queue: queue.dequeuetimeend: 25
6248.401706578:main thread : Action 0x2000e80: queue 0x2002a40 created
6248.402504269:main thread : Decoding traditional PRI filter '*.*;auth,authpriv.none'
6248.402513924:main thread : symbolic name: * ==> 255
6248.402526372:main thread : symbolic name: none ==> 16
6248.402538113:main thread : symbolic name: auth ==> 32
6248.402549523:main thread : symbolic name: authpriv ==> 80
6248.402802672:main thread : cnf:global:script
6248.403174010:main thread : tried selector action for builtin:omfile: 0
6248.403181319:main thread : Module builtin:omfile processes this action.
6248.403189482:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.403199616:main thread : action 6 queue: parameter dump:
6248.403206444:main thread : action 6 queue: queue.filename '[NONE]'
6248.403213236:main thread : action 6 queue: queue.size: 1000
6248.403219982:main thread : action 6 queue: queue.dequeuebatchsize: 16
6248.403226541:main thread : action 6 queue: queue.maxdiskspace: 0
6248.403233180:main thread : action 6 queue: queue.highwatermark: -1
6248.403239755:main thread : action 6 queue: queue.lowwatermark: -1
6248.403246314:main thread : action 6 queue: queue.fulldelaymark: -1
6248.403252713:main thread : action 6 queue: queue.lightdelaymark: -1
6248.403259237:main thread : action 6 queue: queue.discardmark: 980
6248.403265775:main thread : action 6 queue: queue.discardseverity: 8
6248.403272253:main thread : action 6 queue: queue.checkpointinterval: 0
6248.403278717:main thread : action 6 queue: queue.syncqueuefiles: 0
6248.403285347:main thread : action 6 queue: queue.type: 3 [Direct]
6248.403291876:main thread : action 6 queue: queue.workerthreads: 1
6248.403298331:main thread : action 6 queue: queue.timeoutshutdown: 0
6248.403304875:main thread : action 6 queue: queue.timeoutactioncompletion: 1000
6248.403311399:main thread : action 6 queue: queue.timeoutenqueue: 50
6248.403318018:main thread : action 6 queue: queue.timeoutworkerthreadshutdown: 60000
6248.403324642:main thread : action 6 queue: queue.workerthreadminimummessages: -1
6248.403331184:main thread : action 6 queue: queue.maxfilesize: 1048576
6248.403337705:main thread : action 6 queue: queue.saveonshutdown: 1
6248.403344141:main thread : action 6 queue: queue.dequeueslowdown: 0
6248.403350632:main thread : action 6 queue: queue.dequeuetimebegin: 0
6248.403357083:main thread : action 6 queue: queue.dequeuetimeend: 25
6248.403363952:main thread : Action 0x2003160: queue 0x2003550 created
6248.404169096:main thread : Decoding traditional PRI filter 'syslog.*'
6248.404176420:main thread : symbolic name: * ==> 255
6248.404188684:main thread : symbolic name: syslog ==> 40
6248.404416948:main thread : cnf:global:script
6248.404828403:main thread : tried selector action for builtin:omfile: 0
6248.404835573:main thread : Module builtin:omfile processes this action.
6248.404843515:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.404857464:main thread : action 7 queue: parameter dump:
6248.404864359:main thread : action 7 queue: queue.filename '[NONE]'
6248.404870913:main thread : action 7 queue: queue.size: 1000
6248.404877565:main thread : action 7 queue: queue.dequeuebatchsize: 16
6248.404891577:main thread : action 7 queue: queue.maxdiskspace: 0
6248.404898172:main thread : action 7 queue: queue.highwatermark: -1
6248.404904597:main thread : action 7 queue: queue.lowwatermark: -1
6248.404911113:main thread : action 7 queue: queue.fulldelaymark: -1
6248.404917624:main thread : action 7 queue: queue.lightdelaymark: -1
6248.404924238:main thread : action 7 queue: queue.discardmark: 980
6248.404930644:main thread : action 7 queue: queue.discardseverity: 8
6248.404937147:main thread : action 7 queue: queue.checkpointinterval: 0
6248.404943510:main thread : action 7 queue: queue.syncqueuefiles: 0
6248.404950083:main thread : action 7 queue: queue.type: 3 [Direct]
6248.404956454:main thread : action 7 queue: queue.workerthreads: 1
6248.404962800:main thread : action 7 queue: queue.timeoutshutdown: 0
6248.404969266:main thread : action 7 queue: queue.timeoutactioncompletion: 1000
6248.404975704:main thread : action 7 queue: queue.timeoutenqueue: 50
6248.404982295:main thread : action 7 queue: queue.timeoutworkerthreadshutdown: 60000
6248.404988833:main thread : action 7 queue: queue.workerthreadminimummessages: -1
6248.404995426:main thread : action 7 queue: queue.maxfilesize: 1048576
6248.405001853:main thread : action 7 queue: queue.saveonshutdown: 1
6248.405008332:main thread : action 7 queue: queue.dequeueslowdown: 0
6248.405014684:main thread : action 7 queue: queue.dequeuetimebegin: 0
6248.405021114:main thread : action 7 queue: queue.dequeuetimeend: 25
6248.405027776:main thread : Action 0x2003c50: queue 0x2004040 created
6248.405836340:main thread : Decoding traditional PRI filter 'kern.*'
6248.405843760:main thread : symbolic name: * ==> 255
6248.405855876:main thread : symbolic name: kern ==> 0
6248.406108210:main thread : cnf:global:script
6248.406475216:main thread : tried selector action for builtin:omfile: 0
6248.406482350:main thread : Module builtin:omfile processes this action.
6248.406490144:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.406499810:main thread : action 8 queue: parameter dump:
6248.406506493:main thread : action 8 queue: queue.filename '[NONE]'
6248.406513147:main thread : action 8 queue: queue.size: 1000
6248.406519831:main thread : action 8 queue: queue.dequeuebatchsize: 16
6248.406526350:main thread : action 8 queue: queue.maxdiskspace: 0
6248.406532916:main thread : action 8 queue: queue.highwatermark: -1
6248.406539240:main thread : action 8 queue: queue.lowwatermark: -1
6248.406545659:main thread : action 8 queue: queue.fulldelaymark: -1
6248.406551992:main thread : action 8 queue: queue.lightdelaymark: -1
6248.406558416:main thread : action 8 queue: queue.discardmark: 980
6248.406564731:main thread : action 8 queue: queue.discardseverity: 8
6248.406571143:main thread : action 8 queue: queue.checkpointinterval: 0
6248.406577521:main thread : action 8 queue: queue.syncqueuefiles: 0
6248.406584056:main thread : action 8 queue: queue.type: 3 [Direct]
6248.406590413:main thread : action 8 queue: queue.workerthreads: 1
6248.406596768:main thread : action 8 queue: queue.timeoutshutdown: 0
6248.406603223:main thread : action 8 queue: queue.timeoutactioncompletion: 1000
6248.406609561:main thread : action 8 queue: queue.timeoutenqueue: 50
6248.406615968:main thread : action 8 queue: queue.timeoutworkerthreadshutdown: 60000
6248.406622424:main thread : action 8 queue: queue.workerthreadminimummessages: -1
6248.406628917:main thread : action 8 queue: queue.maxfilesize: 1048576
6248.406635352:main thread : action 8 queue: queue.saveonshutdown: 1
6248.406641664:main thread : action 8 queue: queue.dequeueslowdown: 0
6248.406648061:main thread : action 8 queue: queue.dequeuetimebegin: 0
6248.406654350:main thread : action 8 queue: queue.dequeuetimeend: 25
6248.406660921:main thread : Action 0x2004740: queue 0x2004b30 created
6248.407449098:main thread : Decoding traditional PRI filter 'mail.*'
6248.407456631:main thread : symbolic name: * ==> 255
6248.407468883:main thread : symbolic name: mail ==> 16
6248.407698905:main thread : cnf:global:script
6248.408085106:main thread : tried selector action for builtin:omfile: 0
6248.408092397:main thread : Module builtin:omfile processes this action.
6248.408100198:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.408109576:main thread : action 9 queue: parameter dump:
6248.408116234:main thread : action 9 queue: queue.filename '[NONE]'
6248.408122714:main thread : action 9 queue: queue.size: 1000
6248.408129314:main thread : action 9 queue: queue.dequeuebatchsize: 16
6248.408135901:main thread : action 9 queue: queue.maxdiskspace: 0
6248.408142443:main thread : action 9 queue: queue.highwatermark: -1
6248.408148847:main thread : action 9 queue: queue.lowwatermark: -1
6248.408155253:main thread : action 9 queue: queue.fulldelaymark: -1
6248.408161676:main thread : action 9 queue: queue.lightdelaymark: -1
6248.408168125:main thread : action 9 queue: queue.discardmark: 980
6248.408174478:main thread : action 9 queue: queue.discardseverity: 8
6248.408180874:main thread : action 9 queue: queue.checkpointinterval: 0
6248.408187307:main thread : action 9 queue: queue.syncqueuefiles: 0
6248.408193887:main thread : action 9 queue: queue.type: 3 [Direct]
6248.408200347:main thread : action 9 queue: queue.workerthreads: 1
6248.408206658:main thread : action 9 queue: queue.timeoutshutdown: 0
6248.408213078:main thread : action 9 queue: queue.timeoutactioncompletion: 1000
6248.408219506:main thread : action 9 queue: queue.timeoutenqueue: 50
6248.408226050:main thread : action 9 queue: queue.timeoutworkerthreadshutdown: 60000
6248.408232521:main thread : action 9 queue: queue.workerthreadminimummessages: -1
6248.408239015:main thread : action 9 queue: queue.maxfilesize: 1048576
6248.408245392:main thread : action 9 queue: queue.saveonshutdown: 1
6248.408251738:main thread : action 9 queue: queue.dequeueslowdown: 0
6248.408258183:main thread : action 9 queue: queue.dequeuetimebegin: 0
6248.408264603:main thread : action 9 queue: queue.dequeuetimeend: 25
6248.408271265:main thread : Action 0x2005230: queue 0x2005620 created
6248.409094938:main thread : Decoding traditional PRI filter 'mail.err'
6248.409102487:main thread : symbolic name: err ==> 3
6248.409114423:main thread : symbolic name: mail ==> 16
6248.409371524:main thread : cnf:global:script
6248.409718481:main thread : tried selector action for builtin:omfile: 0
6248.409725583:main thread : Module builtin:omfile processes this action.
6248.409733351:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.409742862:main thread : action 10 queue: parameter dump:
6248.409749480:main thread : action 10 queue: queue.filename '[NONE]'
6248.409756086:main thread : action 10 queue: queue.size: 1000
6248.409762664:main thread : action 10 queue: queue.dequeuebatchsize: 16
6248.409769094:main thread : action 10 queue: queue.maxdiskspace: 0
6248.409775566:main thread : action 10 queue: queue.highwatermark: -1
6248.409781907:main thread : action 10 queue: queue.lowwatermark: -1
6248.409788328:main thread : action 10 queue: queue.fulldelaymark: -1
6248.409794601:main thread : action 10 queue: queue.lightdelaymark: -1
6248.409801020:main thread : action 10 queue: queue.discardmark: 980
6248.409807418:main thread : action 10 queue: queue.discardseverity: 8
6248.409813804:main thread : action 10 queue: queue.checkpointinterval: 0
6248.409820080:main thread : action 10 queue: queue.syncqueuefiles: 0
6248.409826624:main thread : action 10 queue: queue.type: 3 [Direct]
6248.409833002:main thread : action 10 queue: queue.workerthreads: 1
6248.409839309:main thread : action 10 queue: queue.timeoutshutdown: 0
6248.409845684:main thread : action 10 queue: queue.timeoutactioncompletion: 1000
6248.409865267:main thread : action 10 queue: queue.timeoutenqueue: 50
6248.409871896:main thread : action 10 queue: queue.timeoutworkerthreadshutdown: 60000
6248.409878387:main thread : action 10 queue: queue.workerthreadminimummessages: -1
6248.409884963:main thread : action 10 queue: queue.maxfilesize: 1048576
6248.409891308:main thread : action 10 queue: queue.saveonshutdown: 1
6248.409897739:main thread : action 10 queue: queue.dequeueslowdown: 0
6248.409904056:main thread : action 10 queue: queue.dequeuetimebegin: 0
6248.409910371:main thread : action 10 queue: queue.dequeuetimeend: 25
6248.409917126:main thread : Action 0x2005d20: queue 0x2006110 created
6248.410737222:main thread : Decoding traditional PRI filter 'news.crit'
6248.410747182:main thread : symbolic name: crit ==> 2
6248.410759924:main thread : symbolic name: news ==> 56
6248.410919571:main thread : cnf:global:script
6248.411196336:main thread : tried selector action for builtin:omfile: 0
6248.411203214:main thread : Module builtin:omfile processes this action.
6248.411211635:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.411221555:main thread : action 11 queue: parameter dump:
6248.411228216:main thread : action 11 queue: queue.filename '[NONE]'
6248.411234802:main thread : action 11 queue: queue.size: 1000
6248.411241359:main thread : action 11 queue: queue.dequeuebatchsize: 16
6248.411247901:main thread : action 11 queue: queue.maxdiskspace: 0
6248.411254502:main thread : action 11 queue: queue.highwatermark: -1
6248.411261171:main thread : action 11 queue: queue.lowwatermark: -1
6248.411267745:main thread : action 11 queue: queue.fulldelaymark: -1
6248.411274297:main thread : action 11 queue: queue.lightdelaymark: -1
6248.411280855:main thread : action 11 queue: queue.discardmark: 980
6248.411287522:main thread : action 11 queue: queue.discardseverity: 8
6248.411294182:main thread : action 11 queue: queue.checkpointinterval: 0
6248.411300711:main thread : action 11 queue: queue.syncqueuefiles: 0
6248.411307419:main thread : action 11 queue: queue.type: 3 [Direct]
6248.411313944:main thread : action 11 queue: queue.workerthreads: 1
6248.411320491:main thread : action 11 queue: queue.timeoutshutdown: 0
6248.411327081:main thread : action 11 queue: queue.timeoutactioncompletion: 1000
6248.411333618:main thread : action 11 queue: queue.timeoutenqueue: 50
6248.411340306:main thread : action 11 queue: queue.timeoutworkerthreadshutdown: 60000
6248.411346986:main thread : action 11 queue: queue.workerthreadminimummessages: -1
6248.411353683:main thread : action 11 queue: queue.maxfilesize: 1048576
6248.411360331:main thread : action 11 queue: queue.saveonshutdown: 1
6248.411366879:main thread : action 11 queue: queue.dequeueslowdown: 0
6248.411373607:main thread : action 11 queue: queue.dequeuetimebegin: 0
6248.411380615:main thread : action 11 queue: queue.dequeuetimeend: 25
6248.411387323:main thread : Action 0x2006810: queue 0x2006c00 created
6248.412075298:main thread : Decoding traditional PRI filter 'news.err'
6248.412082794:main thread : symbolic name: err ==> 3
6248.412094888:main thread : symbolic name: news ==> 56
6248.412317541:main thread : cnf:global:script
6248.412679662:main thread : tried selector action for builtin:omfile: 0
6248.412686714:main thread : Module builtin:omfile processes this action.
6248.412694632:main thread : template: 'RSYSLOG_TraditionalFileFormat' assigned
6248.412703989:main thread : action 12 queue: parameter dump:
6248.412710672:main thread : action 12 queue: queue.filename '[NONE]'
6248.412717180:main thread : action 12 queue: queue.size: 1000
6248.412723509:main thread : action 12 queue: queue.dequeuebatchsize: 16
6248.412729998:main thread : action 12 queue: queue.maxdiskspace: 0
6248.412736565:main thread : action 12 queue: queue.highwatermark: -1
6248.412743050:main thread : action 12 queue: queue.lowwatermark: -1
6248.412757311:main thread : action 12 queue: queue.fulldelaymark: -1
6248.412763897:main thread : action 12 queue: queue.lightdelaymark: -1
6248.412770408:main thread : action 12 queue: queue.discardmark: 980
6248.412776947:main thread : action 12 queue: queue.discardseverity: 8
6248.412783426:main thread : action 12 queue: queue.checkpointinterval: 0
6248.412789838:main thread : action 12 queue: queue.syncqueuefiles: 0
6248.412796474:main thread : action 12 queue: queue.type: 3 [Direct]
6248.412802882:main thread : action 12 queue: queue.workerthreads: 1
6248.412809240:main thread : action 12 queue: queue.timeoutshutdown: 0
6248.412815672:main thread : action 12 queue: queue.timeoutactioncompletion: 1000
6248.412822137:main thread : action 12 queue: queue.timeoutenqueue: 50
6248.412828699:main thread : action 12 queue: queue.timeoutworkerthreadshutdown: 60000
6248.412835178:main thread : action 12 queue: queue.workerthreadminimummessages: -1
6248.412841665:main thread : action 12 queue: queue.maxfilesize: 1048576
6248.412848206:main thread : action 12 queue: queue.saveonshutdown: 1
6248.412854638:main thread : action 12 queue: queue.dequeueslowdown: 0
6248.412861019:main thread : action 12 queue: queue.dequeuetimebegin: 0
6248.412867436:main thread : action 12 queue: queue.dequeuetimeend: 25
6248.412874166:main thread : Action 0x20072c0: queue 0x20076b0 created
6248.413674145:main thread : Decoding traditional PRI filter 'news.notice'
6248.413681868:main thread : symbolic name: notice ==> 5
6248.413693870:main thread : symbolic name: news ==> 56
6248.413914016:main thread : cnf:global:script
6248.414288209:main thread : tried selector action for builtin:omfile: -2001
6248.414297690:main thread : tried selector action for builtin:ompipe: -2001
6248.414304745:main thread : tried selector action for builtin-shell: -2001
6248.414311705:main thread : tried selector action for builtin:omdiscard: -2001
6248.414321717:main thread : tried selector action for builtin:omfwd: -2001
6248.414328919:main thread : write-alltried selector action for builtin:omusrmsg: 0
6248.414341134:main thread : Module builtin:omusrmsg processes this action.
6248.414348960:main thread : template: ' WallFmt' assigned
6248.414363520:main thread : action 13 queue: parameter dump:
6248.414370205:main thread : action 13 queue: queue.filename '[NONE]'
6248.414376747:main thread : action 13 queue: queue.size: 1000
6248.414383255:main thread : action 13 queue: queue.dequeuebatchsize: 16
6248.414389801:main thread : action 13 queue: queue.maxdiskspace: 0
6248.414396245:main thread : action 13 queue: queue.highwatermark: -1
6248.414402682:main thread : action 13 queue: queue.lowwatermark: -1
6248.414409039:main thread : action 13 queue: queue.fulldelaymark: -1
6248.414415462:main thread : action 13 queue: queue.lightdelaymark: -1
6248.414421836:main thread : action 13 queue: queue.discardmark: 980
6248.414428248:main thread : action 13 queue: queue.discardseverity: 8
6248.414434643:main thread : action 13 queue: queue.checkpointinterval: 0
6248.414441108:main thread : action 13 queue: queue.syncqueuefiles: 0
6248.414447593:main thread : action 13 queue: queue.type: 3 [Direct]
6248.414453923:main thread : action 13 queue: queue.workerthreads: 1
6248.414460160:main thread : action 13 queue: queue.timeoutshutdown: 0
6248.414466492:main thread : action 13 queue: queue.timeoutactioncompletion: 1000
6248.414472979:main thread : action 13 queue: queue.timeoutenqueue: 50
6248.414479487:main thread : action 13 queue: queue.timeoutworkerthreadshutdown: 60000
6248.414485987:main thread : action 13 queue: queue.workerthreadminimummessages: -1
6248.414492470:main thread : action 13 queue: queue.maxfilesize: 1048576
6248.414498918:main thread : action 13 queue: queue.saveonshutdown: 1
6248.414505266:main thread : action 13 queue: queue.dequeueslowdown: 0
6248.414511666:main thread : action 13 queue: queue.dequeuetimebegin: 0
6248.414525722:main thread : action 13 queue: queue.dequeuetimeend: 25
6248.414532725:main thread : Action 0x2007c40: queue 0x2008030 created
6248.414860159:main thread : config parser: reached end of file /etc/rsyslog.d/50-default.conf
6248.414868337:main thread : config parser: resume parsing of file /etc/rsyslog.d/postfix.conf at line 1
6248.414879098:main thread : cnf:global:cfsysline: $AddUnixListenSocket /var/spool/postfix/dev/log
6248.414890939:main thread : doGetWord: get newval '/var/spool/postfix/dev/log' (len 26), hdlr 0x7f2f652fe860
6248.414902519:main thread : config parser: reached end of file /etc/rsyslog.d/postfix.conf
6248.414909629:main thread : config parser: resume parsing of file /etc/rsyslog.conf at line 58
6248.414916239:main thread : config parser: reached end of file /etc/rsyslog.conf
6248.414922586:main thread : config parser: parsing completed
6248.415385029:main thread : Decoding traditional PRI filter '*.emerg'
6248.415392542:main thread : symbolic name: emerg ==> 0
6248.415614827:main thread : cnf:global:script
6248.415903820:main thread : Number of actions in this configuration: 13
6248.415911007:main thread : begin ruleset optimization phase
6248.415918055:main thread : ruleset 'RSYSLOG_DefaultRuleset' before optimization:
6248.415925861:main thread : ruleset 0x1fec5a0: rsyslog ruleset RSYSLOG_DefaultRuleset:
6248.415933441:main thread : PROPFILT
6248.415940275:main thread : Property.: 'msg'
6248.415946398:main thread : Operation: 'contains'
6248.415957927:main thread : Value....: '[UFW '
6248.415964184:main thread : THEN
6248.415970311:main thread : ACTION 0 [builtin:omfile:/var/log/ufw.log]
6248.415981774:main thread : END PROPFILT
6248.415987787:main thread : PROPFILT
6248.415994122:main thread : Property.: 'syslogtag'
6248.416000098:main thread : Operation: 'isequal'
6248.416011185:main thread : Value....: '[CLOUDINIT]'
6248.416017074:main thread : THEN
6248.416022973:main thread : ACTION 1 [builtin:omfile:/var/log/cloud-init.log]
6248.416034359:main thread : ACTION 2 [builtin:omdiscard:~]
6248.416045514:main thread : END PROPFILT
6248.416051822:main thread : PRIFILT 'auth,authpriv.*'
6248.416057861:main thread : pmask: X X X X FF X X X X X FF X X X X X X X X X X X X X X X
6248.416184393:main thread : ACTION 3 [builtin:omfile:/var/log/auth.log]
6248.416195678:main thread : END PRIFILT
6248.416201956:main thread : PRIFILT '*.*;auth,authpriv.none'
6248.416207960:main thread : pmask: FF FF FF FF X FF FF FF FF FF X FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
6248.416337566:main thread : ACTION 4 [builtin:omfile:/var/log/syslog]
6248.416348696:main thread : END PRIFILT
6248.416354781:main thread : PRIFILT 'syslog.*'
6248.416360613:main thread : pmask: X X X X X FF X X X X X X X X X X X X X X X X X X X X
6248.416487420:main thread : ACTION 5 [builtin:omfile:/var/log/rsyslog.log #rsyslog error messages]
6248.416498660:main thread : END PRIFILT
6248.416504939:main thread : PRIFILT 'kern.*'
6248.416510790:main thread : pmask: FF X X X X X X X X X X X X X X X X X X X X X X X X X
6248.416637640:main thread : ACTION 6 [builtin:omfile:/var/log/kern.log]
6248.416648692:main thread : END PRIFILT
6248.416654780:main thread : PRIFILT 'mail.*'
6248.416660628:main thread : pmask: X X FF X X X X X X X X X X X X X X X X X X X X X X X
6248.416787740:main thread : ACTION 7 [builtin:omfile:/var/log/mail.log]
6248.416798835:main thread : END PRIFILT
6248.416804916:main thread : PRIFILT 'mail.err'
6248.416810780:main thread : pmask: X X F X X X X X X X X X X X X X X X X X X X X X X X
6248.416937956:main thread : ACTION 8 [builtin:omfile:/var/log/mail.err]
6248.416949051:main thread : END PRIFILT
6248.416955115:main thread : PRIFILT 'news.crit'
6248.416961101:main thread : pmask: X X X X X X X 7 X X X X X X X X X X X X X X X X X X
6248.417096683:main thread : ACTION 9 [builtin:omfile:/var/log/news/news.crit]
6248.417108212:main thread : END PRIFILT
6248.417114322:main thread : PRIFILT 'news.err'
6248.417120258:main thread : pmask: X X X X X X X F X X X X X X X X X X X X X X X X X X
6248.417247847:main thread : ACTION 10 [builtin:omfile:/var/log/news/news.err]
6248.417259076:main thread : END PRIFILT
6248.417265234:main thread : PRIFILT 'news.notice'
6248.417271243:main thread : pmask: X X X X X X X 3F X X X X X X X X X X X X X X X X X X
6248.417424265:main thread : ACTION 11 [builtin:omfile:/var/log/news/news.notice]
6248.417435616:main thread : END PRIFILT
6248.417441871:main thread : PRIFILT '*.emerg'
6248.417447776:main thread : pmask: 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1
6248.417578248:main thread : ACTION 12 [builtin:omusrmsg::omusrmsg:*]
6248.417589720:main thread : END PRIFILT
6248.417596357:main thread : ruleset 0x1fec5a0: ruleset RSYSLOG_DefaultRuleset assigned parser list:
6248.417604202:main thread : optimizer: replacing omdiscard by STOP
6248.417612262:main thread : ruleset 'RSYSLOG_DefaultRuleset' after optimization:
6248.417618533:main thread : ruleset 0x1fec5a0: rsyslog ruleset RSYSLOG_DefaultRuleset:
6248.417624966:main thread : PROPFILT
6248.417631196:main thread : Property.: 'msg'
6248.417637232:main thread : Operation: 'contains'
6248.417648164:main thread : Value....: '[UFW '
6248.417654144:main thread : THEN
6248.417660128:main thread : ACTION 0 [builtin:omfile:/var/log/ufw.log]
6248.417671199:main thread : END PROPFILT
6248.417677154:main thread : PROPFILT
6248.417683417:main thread : Property.: 'syslogtag'
6248.417689390:main thread : Operation: 'isequal'
6248.417700161:main thread : Value....: '[CLOUDINIT]'
6248.417706107:main thread : THEN
6248.417712037:main thread : ACTION 1 [builtin:omfile:/var/log/cloud-init.log]
6248.417723218:main thread : STOP
6248.417733999:main thread : END PROPFILT
6248.417740159:main thread : PRIFILT 'auth,authpriv.*'
6248.417746168:main thread : pmask: X X X X FF X X X X X FF X X X X X X X X X X X X X X X
6248.417873184:main thread : ACTION 3 [builtin:omfile:/var/log/auth.log]
6248.417884442:main thread : END PRIFILT
6248.417890568:main thread : PRIFILT '*.*;auth,authpriv.none'
6248.417896494:main thread : pmask: FF FF FF FF X FF FF FF FF FF X FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
6248.418055118:main thread : ACTION 4 [builtin:omfile:/var/log/syslog]
6248.418066440:main thread : END PRIFILT
6248.418072691:main thread : PRIFILT 'syslog.*'
6248.418078674:main thread : pmask: X X X X X FF X X X X X X X X X X X X X X X X X X X X
6248.418205704:main thread : ACTION 5 [builtin:omfile:/var/log/rsyslog.log #rsyslog error messages]
6248.418217067:main thread : END PRIFILT
6248.418223291:main thread : PRIFILT 'kern.*'
6248.418229294:main thread : pmask: FF X X X X X X X X X X X X X X X X X X X X X X X X X
6248.418356542:main thread : ACTION 6 [builtin:omfile:/var/log/kern.log]
6248.418367731:main thread : END PRIFILT
6248.418373823:main thread : PRIFILT 'mail.*'
6248.418379783:main thread : pmask: X X FF X X X X X X X X X X X X X X X X X X X X X X X
6248.418507502:main thread : ACTION 7 [builtin:omfile:/var/log/mail.log]
6248.418518596:main thread : END PRIFILT
6248.418524695:main thread : PRIFILT 'mail.err'
6248.418530701:main thread : pmask: X X F X X X X X X X X X X X X X X X X X X X X X X X
6248.418658181:main thread : ACTION 8 [builtin:omfile:/var/log/mail.err]
6248.418669335:main thread : END PRIFILT
6248.418675466:main thread : PRIFILT 'news.crit'
6248.418681535:main thread : pmask: X X X X X X X 7 X X X X X X X X X X X X X X X X X X
6248.418815672:main thread : ACTION 9 [builtin:omfile:/var/log/news/news.crit]
6248.418826926:main thread : END PRIFILT
6248.418833056:main thread : PRIFILT 'news.err'
6248.418838988:main thread : pmask: X X X X X X X F X X X X X X X X X X X X X X X X X X
6248.418964437:main thread : ACTION 10 [builtin:omfile:/var/log/news/news.err]
6248.418975566:main thread : END PRIFILT
6248.418981637:main thread : PRIFILT 'news.notice'
6248.418987646:main thread : pmask: X X X X X X X 3F X X X X X X X X X X X X X X X X X X
6248.419112813:main thread : ACTION 11 [builtin:omfile:/var/log/news/news.notice]
6248.419124026:main thread : END PRIFILT
6248.419130101:main thread : PRIFILT '*.emerg'
6248.419136114:main thread : pmask: 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1
6248.419264977:main thread : ACTION 12 [builtin:omusrmsg::omusrmsg:*]
6248.419276158:main thread : END PRIFILT
6248.419282391:main thread : ruleset 0x1fec5a0: ruleset RSYSLOG_DefaultRuleset assigned parser list:
6248.419289039:main thread : ruleset optimization phase finished.
6248.419295421:main thread : telling rsyslog core that config load for 0x1fe9520 is done
6248.419304502:main thread : Timezone information table (0 entries):
6248.419311224:main thread : telling modules that config load for 0x1fe9520 is done
6248.419318057:main thread : beginCnfLoad(0x44a5e0) for module 'builtin:omfile'
6248.419324395:main thread : calling endCnfLoad() for module 'builtin:omfile'
6248.419331185:main thread : beginCnfLoad(0x44d460) for module 'builtin:ompipe'
6248.419337412:main thread : calling endCnfLoad() for module 'builtin:ompipe'
6248.419344375:main thread : beginCnfLoad((nil)) for module 'builtin-shell'
6248.419350898:main thread : beginCnfLoad((nil)) for module 'builtin:omdiscard'
6248.419357407:main thread : beginCnfLoad(0x447ae0) for module 'builtin:omfwd'
6248.419363695:main thread : calling endCnfLoad() for module 'builtin:omfwd'
6248.419370145:main thread : beginCnfLoad((nil)) for module 'builtin:omusrmsg'
6248.419376580:main thread : beginCnfLoad((nil)) for module 'builtin:pmrfc5424'
6248.419382837:main thread : beginCnfLoad((nil)) for module 'builtin:pmrfc3164'
6248.419389204:main thread : beginCnfLoad((nil)) for module 'builtin:smfile'
6248.419395584:main thread : beginCnfLoad((nil)) for module 'builtin:smtradfile'
6248.419401766:main thread : beginCnfLoad((nil)) for module 'builtin:smfwd'
6248.419407995:main thread : beginCnfLoad((nil)) for module 'builtin:smtradfwd'
6248.419414293:main thread : beginCnfLoad(0x7f2f652fdbe0) for module 'imuxsock'
6248.419420476:main thread : calling endCnfLoad() for module 'imuxsock'
6248.419427227:main thread : beginCnfLoad(0x7f2f650f7c00) for module 'imklog'
6248.419433472:main thread : calling endCnfLoad() for module 'imklog'
6248.419440267:main thread : telling modules to check config 0x1fe9520
6248.419447000:main thread : module builtin:omfile tells us config can be activated
6248.419453533:main thread : module builtin:ompipe tells us config can be activated
6248.419460071:main thread : module builtin:omfwd tells us config can be activated
6248.419466772:main thread : module imuxsock tells us config can be activated
6248.419473168:main thread : module imklog tells us config can be activated
6248.419479646:main thread : rsyslog finished loading master config 0x1fe9520
6248.419486108:main thread : configuration object 0x1fe9520
6248.419492022:main thread : Global Settings:
6248.419498264:main thread : bDebugPrintTemplateList.............: 1
6248.419504478:main thread : bDebugPrintModuleList : 0
6248.419510583:main thread : bDebugPrintCfSysLineHandlerList.....: 0
6248.419516557:main thread : bLogStatusMsgs : 1
6248.419522616:main thread : bErrMsgToStderr.....................: 1
6248.419539464:main thread : drop Msgs with malicious PTR Record : 0
6248.419545701:main thread : All Rulesets:
6248.419552110:main thread : ruleset 0x1fec5a0: rsyslog ruleset RSYSLOG_DefaultRuleset:
6248.419558527:main thread : PROPFILT
6248.419564803:main thread : Property.: 'msg'
6248.419570781:main thread : Operation: 'contains'
6248.419581451:main thread : Value....: '[UFW '
6248.419587324:main thread : THEN
6248.419593265:main thread : ACTION 0 [builtin:omfile:/var/log/ufw.log]
6248.419604388:main thread : END PROPFILT
6248.419610459:main thread : PROPFILT
6248.419616581:main thread : Property.: 'syslogtag'
6248.419622529:main thread : Operation: 'isequal'
6248.419633376:main thread : Value....: '[CLOUDINIT]'
6248.419639316:main thread : THEN
6248.419645249:main thread : ACTION 1 [builtin:omfile:/var/log/cloud-init.log]
6248.419656218:main thread : STOP
6248.419666685:main thread : END PROPFILT
6248.419672756:main thread : PRIFILT 'auth,authpriv.*'
6248.419678855:main thread : pmask: X X X X FF X X X X X FF X X X X X X X X X X X X X X X
6248.419803985:main thread : ACTION 3 [builtin:omfile:/var/log/auth.log]
6248.419815070:main thread : END PRIFILT
6248.419821192:main thread : PRIFILT '*.*;auth,authpriv.none'
6248.419827137:main thread : pmask: FF FF FF FF X FF FF FF FF FF X FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
6248.419956439:main thread : ACTION 4 [builtin:omfile:/var/log/syslog]
6248.419967413:main thread : END PRIFILT
6248.419973417:main thread : PRIFILT 'syslog.*'
6248.419979241:main thread : pmask: X X X X X FF X X X X X X X X X X X X X X X X X X X X
6248.420103750:main thread : ACTION 5 [builtin:omfile:/var/log/rsyslog.log #rsyslog error messages]
6248.420114933:main thread : END PRIFILT
6248.420120994:main thread : PRIFILT 'kern.*'
6248.420126881:main thread : pmask: FF X X X X X X X X X X X X X X X X X X X X X X X X X
6248.420251323:main thread : ACTION 6 [builtin:omfile:/var/log/kern.log]
6248.420262397:main thread : END PRIFILT
6248.420268387:main thread : PRIFILT 'mail.*'
6248.420274263:main thread : pmask: X X FF X X X X X X X X X X X X X X X X X X X X X X X
6248.420400140:main thread : ACTION 7 [builtin:omfile:/var/log/mail.log]
6248.420411134:main thread : END PRIFILT
6248.420417136:main thread : PRIFILT 'mail.err'
6248.420423045:main thread : pmask: X X F X X X X X X X X X X X X X X X X X X X X X X X
6248.420548297:main thread : ACTION 8 [builtin:omfile:/var/log/mail.err]
6248.420559326:main thread : END PRIFILT
6248.420565347:main thread : PRIFILT 'news.crit'
6248.420571226:main thread : pmask: X X X X X X X 7 X X X X X X X X X X X X X X X X X X
6248.420696675:main thread : ACTION 9 [builtin:omfile:/var/log/news/news.crit]
6248.420707746:main thread : END PRIFILT
6248.420713849:main thread : PRIFILT 'news.err'
6248.420719794:main thread : pmask: X X X X X X X F X X X X X X X X X X X X X X X X X X
6248.420845866:main thread : ACTION 10 [builtin:omfile:/var/log/news/news.err]
6248.420857153:main thread : END PRIFILT
6248.420863244:main thread : PRIFILT 'news.notice'
6248.421025697:main thread : pmask: X X X X X X X 3F X X X X X X X X X X X X X X X X X X
6248.421151546:main thread : ACTION 11 [builtin:omfile:/var/log/news/news.notice]
6248.421162922:main thread : END PRIFILT
6248.421169085:main thread : PRIFILT '*.emerg'
6248.421175327:main thread : pmask: 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1
6248.421303960:main thread : ACTION 12 [builtin:omusrmsg::omusrmsg:*]
6248.421384363:main thread : END PRIFILT
6248.421390924:main thread : ruleset 0x1fec5a0: ruleset RSYSLOG_DefaultRuleset assigned parser list:
6248.421397819:main thread : End of Rulesets.
6248.421412033:main thread :
6248.421419058:main thread : Template: Name='RSYSLOG_DebugFormat'
6248.421431380:main thread : Entry(1fef070): type 1, (CONSTANT), value: 'Debug line with all properties:
FROMHOST: ''
6248.421447527:main thread : Entry(1fef130): type 2, (FIELD), value: '7'
6248.421463425:main thread : Entry(1fef2a0): type 1, (CONSTANT), value: '', fromhost-ip: ''
6248.421478999:main thread : Entry(1fef360): type 2, (FIELD), value: '8'
6248.421494588:main thread : Entry(1fef4d0): type 1, (CONSTANT), value: '', HOSTNAME: ''
6248.421509840:main thread : Entry(1fef590): type 2, (FIELD), value: '3'
6248.421525095:main thread : Entry(1fef700): type 1, (CONSTANT), value: '', PRI: '
6248.421540468:main thread : Entry(1fef7c0): type 2, (FIELD), value: '9'
6248.421555928:main thread : Entry(1fef930): type 1, (CONSTANT), value: ',
syslogtag ''
6248.421571308:main thread : Entry(1fef9f0): type 2, (FIELD), value: '4'
6248.421586838:main thread : Entry(1fefb60): type 1, (CONSTANT), value: '', programname: ''
6248.421602378:main thread : Entry(1fefc20): type 2, (FIELD), value: '17'
6248.421617935:main thread : Entry(1fefd90): type 1, (CONSTANT), value: '', APP-NAME: ''
6248.421633447:main thread : Entry(1fefe50): type 2, (FIELD), value: '20'
6248.421648851:main thread : Entry(1feffc0): type 1, (CONSTANT), value: '', PROCID: ''
6248.421664296:main thread : Entry(1ff0080): type 2, (FIELD), value: '21'
6248.421679893:main thread : Entry(1ff01f0): type 1, (CONSTANT), value: '', MSGID: ''
6248.421695343:main thread : Entry(1ff02b0): type 2, (FIELD), value: '22'
6248.421710895:main thread : Entry(1ff0420): type 1, (CONSTANT), value: '',
TIMESTAMP: ''
6248.421726267:main thread : Entry(1ff04e0): type 2, (FIELD), value: '2'
6248.421741724:main thread : Entry(1ff0650): type 1, (CONSTANT), value: '', STRUCTURED-DATA: ''
6248.421757279:main thread : Entry(1ff0710): type 2, (FIELD), value: '19'
6248.421773061:main thread : Entry(1ff0880): type 1, (CONSTANT), value: '',
msg: ''
6248.421788604:main thread : Entry(1ff0940): type 2, (FIELD), value: '1'
6248.421804228:main thread : Entry(1ff0ab0): type 1, (CONSTANT), value: ''
escaped msg: ''
6248.421819613:main thread : Entry(1ff0b70): type 2, (FIELD), value: '1' [drop control-characters] [COMPLEX]
6248.421845036:main thread : Entry(1ff0ce0): type 1, (CONSTANT), value: ''
inputname: '
6248.421860733:main thread : Entry(1ff0da0): type 2, (FIELD), value: '6'
6248.421876379:main thread : Entry(1ff0f10): type 1, (CONSTANT), value: ' rawmsg: ''
6248.421891940:main thread : Entry(1ff0fd0): type 2, (FIELD), value: '5'
6248.421907519:main thread : Entry(1ff1140): type 1, (CONSTANT), value: ''
$!:'
6248.421922868:main thread : Entry(1ff1200): type 2, (FIELD), value: '200' [EE-Property: '!']
6248.421943166:main thread : Entry(1ff1390): type 1, (CONSTANT), value: '
$.:'
6248.421958436:main thread : Entry(1ff1450): type 2, (FIELD), value: '202' [Local Var: '!']
6248.421978580:main thread : Entry(1ff15e0): type 1, (CONSTANT), value: '
$/:'
6248.421993796:main thread : Entry(1ff16a0): type 2, (FIELD), value: '203'
6248.422009108:main thread : Entry(1ff1830): type 1, (CONSTANT), value: '
'
6248.422052092:main thread : Template: Name='RSYSLOG_SyslogProtocol23Format'
6248.422065378:main thread : Entry(1ff1a20): type 1, (CONSTANT), value: '<'
6248.422081404:main thread : Entry(1ff1ae0): type 2, (FIELD), value: '9'
6248.422096944:main thread : Entry(1ff1c50): type 1, (CONSTANT), value: '>1 '
6248.422112126:main thread : Entry(1ff1d10): type 2, (FIELD), value: '2' [Format as RFC3339-Date] [COMPLEX]
6248.422137214:main thread : Entry(1ff1e80): type 1, (CONSTANT), value: ' '
6248.422152645:main thread : Entry(1ff1f40): type 2, (FIELD), value: '3'
6248.422167858:main thread : Entry(1ff20b0): type 1, (CONSTANT), value: ' '
6248.422182891:main thread : Entry(1ff2170): type 2, (FIELD), value: '20'
6248.422205464:main thread : Entry(1ff22e0): type 1, (CONSTANT), value: ' '
6248.422220748:main thread : Entry(1ff23a0): type 2, (FIELD), value: '21'
6248.422236111:main thread : Entry(1ff2510): type 1, (CONSTANT), value: ' '
6248.422251347:main thread : Entry(1ff25d0): type 2, (FIELD), value: '22'
6248.422266761:main thread : Entry(1ff2740): type 1, (CONSTANT), value: ' '
6248.422282199:main thread : Entry(1ff2800): type 2, (FIELD), value: '19'
6248.422297679:main thread : Entry(1ff2970): type 1, (CONSTANT), value: ' '
6248.422313013:main thread : Entry(1ff2a30): type 2, (FIELD), value: '1'
6248.422328175:main thread : Entry(1ff2ba0): type 1, (CONSTANT), value: '
'
6248.422343382:main thread : Template: Name='RSYSLOG_FileFormat'
6248.422354148:main thread : Template: Name='RSYSLOG_TraditionalFileFormat'
6248.422364766:main thread : Template: Name=' WallFmt'
6248.422375505:main thread : Entry(1ff2eb0): type 1, (CONSTANT), value: '^M
^GMessage from syslogd@'
6248.422390908:main thread : Entry(1ff2f70): type 2, (FIELD), value: '3'
6248.422406370:main thread : Entry(1ff30e0): type 1, (CONSTANT), value: ' at '
6248.422421869:main thread : Entry(1ff31a0): type 2, (FIELD), value: '16'
6248.422437659:main thread : Entry(1ff3310): type 1, (CONSTANT), value: ' ...^M
'
6248.422453087:main thread : Entry(1ff33d0): type 2, (FIELD), value: '4'
6248.422468422:main thread : Entry(1ff3540): type 2, (FIELD), value: '1'
6248.422483835:main thread : Entry(1ff3620): type 1, (CONSTANT), value: '
^M'
6248.422499396:main thread : Template: Name='RSYSLOG_ForwardFormat'
6248.422510188:main thread : Template: Name='RSYSLOG_TraditionalForwardFormat'
6248.422520874:main thread : Template: Name=' StdUsrMsgFmt'
6248.422531717:main thread : Entry(1ff3930): type 1, (CONSTANT), value: ' '
6248.422547209:main thread : Entry(1ff39f0): type 2, (FIELD), value: '4'
6248.422562733:main thread : Entry(1ff3b60): type 2, (FIELD), value: '1'
6248.422578015:main thread : Entry(1ff3c40): type 1, (CONSTANT), value: '
^M'
6248.422593127:main thread : Template: Name=' StdDBFmt' [SQL-Format (MySQL)]
6248.422608623:main thread : Entry(1ff3f20): type 1, (CONSTANT), value: 'insert into SystemEvents (Message, Facility, FromHost, Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (''
6248.422624564:main thread : Entry(1ff3fe0): type 2, (FIELD), value: '1'
6248.422640143:main thread : Entry(1ff4150): type 1, (CONSTANT), value: '', '
6248.422655599:main thread : Entry(1ff4210): type 2, (FIELD), value: '12'
6248.422671013:main thread : Entry(1ff4380): type 1, (CONSTANT), value: ', ''
6248.422686228:main thread : Entry(1ff4440): type 2, (FIELD), value: '3'
6248.422701594:main thread : Entry(1ff45b0): type 1, (CONSTANT), value: '', '
6248.422716843:main thread : Entry(1ff4670): type 2, (FIELD), value: '14'
6248.422732232:main thread : Entry(1ff47e0): type 1, (CONSTANT), value: ', ''
6248.422747460:main thread : Entry(1ff48a0): type 2, (FIELD), value: '2' [Format as MySQL-Date] [COMPLEX]
6248.422772462:main thread : Entry(1ff4a10): type 1, (CONSTANT), value: '', ''
6248.422787798:main thread : Entry(1ff4ad0): type 2, (FIELD), value: '16' [Format as MySQL-Date] [COMPLEX]
6248.422812324:main thread : Entry(1ff4c40): type 1, (CONSTANT), value: '', '
6248.422827596:main thread : Entry(1ff4d00): type 2, (FIELD), value: '11'
6248.422843180:main thread : Entry(1ff4e70): type 1, (CONSTANT), value: ', ''
6248.422858735:main thread : Entry(1ff4f30): type 2, (FIELD), value: '4'
6248.422874110:main thread : Entry(1ff50a0): type 1, (CONSTANT), value: '')'
6248.422889569:main thread : Template: Name='RSYSLOG_SysklogdFileFormat'
6248.422900571:main thread : Entry(1ff5200): type 2, (FIELD), value: '2'
6248.422916143:main thread : Entry(1ff5370): type 1, (CONSTANT), value: ' '
6248.422931539:main thread : Entry(1ff5430): type 2, (FIELD), value: '3'
6248.422953982:main thread : Entry(1ff55a0): type 1, (CONSTANT), value: ' '
6248.422969554:main thread : Entry(1ff5660): type 2, (FIELD), value: '4'
6248.422985175:main thread : Entry(1ff57d0): type 2, (FIELD), value: '1' [SP iff no first SP] [COMPLEX]
6248.423010373:main thread : Entry(1ff58b0): type 2, (FIELD), value: '1'
6248.423026059:main thread : Entry(1ff5990): type 1, (CONSTANT), value: '
'
6248.423041405:main thread : Template: Name=' StdPgSQLFmt' [SQL-Format (standard SQL)]
6248.423056912:main thread : Entry(1ff5c70): type 1, (CONSTANT), value: 'insert into SystemEvents (Message, Facility, FromHost, Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values (''
6248.423073021:main thread : Entry(1ff5d30): type 2, (FIELD), value: '1'
6248.423088729:main thread : Entry(1ff5ea0): type 1, (CONSTANT), value: '', '
6248.423104190:main thread : Entry(1ff5f60): type 2, (FIELD), value: '12'
6248.423119822:main thread : Entry(1ff60d0): type 1, (CONSTANT), value: ', ''
6248.423135159:main thread : Entry(1ff6190): type 2, (FIELD), value: '3'
6248.423150792:main thread : Entry(1ff6300): type 1, (CONSTANT), value: '', '
6248.423166088:main thread : Entry(1ff63c0): type 2, (FIELD), value: '14'
6248.423181593:main thread : Entry(1ff6530): type 1, (CONSTANT), value: ', ''
6248.423196829:main thread : Entry(1ff65f0): type 2, (FIELD), value: '2' [Format as PgSQL-Date] [COMPLEX]
6248.423221665:main thread : Entry(1ff6760): type 1, (CONSTANT), value: '', ''
6248.423237033:main thread : Entry(1ff6820): type 2, (FIELD), value: '16' [Format as PgSQL-Date] [COMPLEX]
6248.423261491:main thread : Entry(1ff6990): type 1, (CONSTANT), value: '', '
6248.423276877:main thread : Entry(1ff6a50): type 2, (FIELD), value: '11'
6248.423292305:main thread : Entry(1ff6bc0): type 1, (CONSTANT), value: ', ''
6248.423307729:main thread : Entry(1ff6c80): type 2, (FIELD), value: '4'
6248.423323136:main thread : Entry(1ff6df0): type 1, (CONSTANT), value: '')'
6248.423338393:main thread : Template: Name=' StdJSONFmt'
6248.423349066:main thread : Entry(1ff6fd0): type 1, (CONSTANT), value: '{"message":"'
6248.423364808:main thread : Entry(1ff7090): type 2, (FIELD), value: '1' [format as JSON] [COMPLEX]
6248.423389648:main thread : Entry(1ff7200): type 1, (CONSTANT), value: '","fromhost":"'
6248.423405297:main thread : Entry(1ff72c0): type 2, (FIELD), value: '3' [format as JSON] [COMPLEX]
6248.423429894:main thread : Entry(1ff7430): type 1, (CONSTANT), value: '","facility":"'
6248.423445605:main thread : Entry(1ff74f0): type 2, (FIELD), value: '13'
6248.423461212:main thread : Entry(1ff7660): type 1, (CONSTANT), value: '","priority":"'
6248.423476720:main thread : Entry(1ff7720): type 2, (FIELD), value: '15'
6248.423492247:main thread : Entry(1ff7890): type 1, (CONSTANT), value: '","timereported":"'
6248.423507566:main thread : Entry(1ff7950): type 2, (FIELD), value: '2' [Format as RFC3339-Date] [COMPLEX]
6248.423532401:main thread : Entry(1ff7ac0): type 1, (CONSTANT), value: '","timegenerated":"'
6248.423547873:main thread : Entry(1ff7b80): type 2, (FIELD), value: '16' [Format as RFC3339-Date] [COMPLEX]
6248.423572566:main thread : Entry(1ff7cf0): type 1, (CONSTANT), value: '"}'
6248.423588054:main thread : Template: Name='RSYSLOG_omudpspoofDfltSourceTpl'
6248.423598949:main thread : Entry(1ff7e50): type 2, (FIELD), value: '8'
6248.423614779:main thread : Main queue size 100000 messages.
6248.423621376:main thread : Main queue worker threads: 2, wThread shutdown: 60000, Perists every 0 updates.
6248.423628033:main thread : Main queue timeouts: shutdown: 1500, action completion shutdown: 1000, enq: 2000
6248.423634892:main thread : Main queue watermarks: high: 80000, low: 20000, discard: 98000, discard-severity: 8
6248.423641349:main thread : Main queue save on shutdown 1, max disk space allowed 0
6248.423647702:main thread : Work Directory: '/var/spool/rsyslog'.
6248.423660919:main thread : Modules used in this configuration:
6248.423667186:main thread : builtin:omfile
6248.423673363:main thread : builtin:ompipe
6248.423679514:main thread : builtin-shell
6248.423685670:main thread : builtin:omdiscard
6248.423691765:main thread : builtin:omfwd
6248.423697960:main thread : builtin:omusrmsg
6248.423704058:main thread : builtin:pmrfc5424
6248.423710091:main thread : builtin:pmrfc3164
6248.423716097:main thread : builtin:smfile
6248.423722263:main thread : builtin:smtradfile
6248.423728369:main thread : builtin:smfwd
6248.423734459:main thread : builtin:smtradfwd
6248.423740616:main thread : imuxsock
6248.423746745:main thread : imklog
6248.423755836:main thread : ratelimit:rsyslogd[dflt]:new ratelimiter:bReduceRepeatMsgs 1
6248.423763489:main thread : ratelimit:rsyslogd[internal_messages]:new ratelimiter:bReduceRepeatMsgs 1
6248.423776349:main thread : rsyslogd: checking if startup is ok, pidfile '/var/run/rsyslog.pid'.
6248.423803805:main thread : umask set to 0022.
6248.423811340:main thread : telling modules to activate config (before dropping privs) 0x1fe9520
6248.423818478:main thread : pre priv drop activating config 0x1fe9520 for module imuxsock
6248.423825578:main thread : imuxsock: allocating memory for 1 listeners
6248.423833994:main thread : ratelimit:imuxsock:new ratelimiter:bReduceRepeatMsgs 1
6248.423850805:main thread : ratelimit:imuxsock:new ratelimiter:bReduceRepeatMsgs 1
6248.423898112:main thread : imuxsock: Opened UNIX socket '/dev/log' (fd 3).
6248.423980282:main thread : imuxsock: Opened UNIX socket '/var/spool/postfix/dev/log' (fd 4).
6248.423988118:main thread : pre priv drop activating config 0x1fe9520 for module imklog
6248.424020369:main thread : setgroups(0, NULL): 0
6248.424032240:main thread : setgid(103): 0
6248.424043691:main thread : group privileges have been dropped to gid 103
6248.424056094:main thread : setuid(101): 0
6248.424065380:main thread : user privileges have been dropped to uid 101
6248.424071820:main thread : telling modules to activate config 0x1fe9520
6248.424078336:main thread : activating config 0x1fe9520 for module builtin:omfile
6248.424085030:main thread : activating config 0x1fe9520 for module builtin:ompipe
6248.424091606:main thread : activating config 0x1fe9520 for module builtin:omfwd
6248.424098296:main thread : activating config 0x1fe9520 for module imuxsock
6248.424104936:main thread : activating config 0x1fe9520 for module imklog
6248.424113038:main thread : iterateAllActions calling into action 0x2002070
6248.424119660:main thread : action 1 queue: starting queue
6248.424132928:main thread : action 1 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424140575:main thread : Action builtin:omfile[0x2002070]: queue 0x2002420 started
6248.424147090:main thread : iterateAllActions calling into action 0x2001500
6248.424153167:main thread : action 2 queue: starting queue
6248.424162540:main thread : action 2 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424169691:main thread : Action builtin:omfile[0x2001500]: queue 0x20018f0 started
6248.424176160:main thread : iterateAllActions calling into action 0x20003d0
6248.424182430:main thread : action 4 queue: starting queue
6248.424191425:main thread : action 4 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424208329:main thread : Action builtin:omfile[0x20003d0]: queue 0x2000780 started
6248.424214932:main thread : iterateAllActions calling into action 0x2000e80
6248.424221030:main thread : action 5 queue: starting queue
6248.424229942:main thread : action 5 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424236840:main thread : Action builtin:omfile[0x2000e80]: queue 0x2002a40 started
6248.424243376:main thread : iterateAllActions calling into action 0x2003160
6248.424249619:main thread : action 6 queue: starting queue
6248.424258437:main thread : action 6 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424265313:main thread : Action builtin:omfile[0x2003160]: queue 0x2003550 started
6248.424271773:main thread : iterateAllActions calling into action 0x2003c50
6248.424277868:main thread : action 7 queue: starting queue
6248.424286678:main thread : action 7 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424293582:main thread : Action builtin:omfile[0x2003c50]: queue 0x2004040 started
6248.424299941:main thread : iterateAllActions calling into action 0x2004740
6248.424306051:main thread : action 8 queue: starting queue
6248.424314953:main thread : action 8 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424321832:main thread : Action builtin:omfile[0x2004740]: queue 0x2004b30 started
6248.424328255:main thread : iterateAllActions calling into action 0x2005230
6248.424334415:main thread : action 9 queue: starting queue
6248.424343296:main thread : action 9 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424350176:main thread : Action builtin:omfile[0x2005230]: queue 0x2005620 started
6248.424356523:main thread : iterateAllActions calling into action 0x2005d20
6248.424362703:main thread : action 10 queue: starting queue
6248.424371685:main thread : action 10 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424378518:main thread : Action builtin:omfile[0x2005d20]: queue 0x2006110 started
6248.424384997:main thread : iterateAllActions calling into action 0x2006810
6248.424391099:main thread : action 11 queue: starting queue
6248.424399880:main thread : action 11 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424406903:main thread : Action builtin:omfile[0x2006810]: queue 0x2006c00 started
6248.424420341:main thread : iterateAllActions calling into action 0x20072c0
6248.424426692:main thread : action 12 queue: starting queue
6248.424435770:main thread : action 12 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424442838:main thread : Action builtin:omfile[0x20072c0]: queue 0x20076b0 started
6248.424449140:main thread : iterateAllActions calling into action 0x2007c40
6248.424455256:main thread : action 13 queue: starting queue
6248.424464078:main thread : action 13 queue: params: type 3, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 1000, lqsize 0, pqsize 0, child 0, full delay 970, light delay 700, deq batch size 16, high wtrmrk 900, low wtrmrk 700, discardmrk 980, max wrkr 1, min msgs f. wrkr 1000
6248.424470930:main thread : Action builtin:omusrmsg[0x2007c40]: queue 0x2008030 started
6248.424477995:main thread : Activating Ruleset Queue[(nil)] for Ruleset RSYSLOG_DefaultRuleset
6248.424484765:main thread : activateMainQueue: mainq cnf obj ptr is (nil)
6248.424493044:main thread : main Q: starting queue
6248.424509696:main thread : main Q: is NOT disk-assisted
6248.424518974:main thread : main Q: params: type 0, enq-only 0, disk assisted 0, spoolDir '/var/spool/rsyslog', maxFileSz 1048576, maxQSize 100000, lqsize 0, pqsize 0, child 0, full delay 97000, light delay 70000, deq batch size 256, high wtrmrk 80000, low wtrmrk 20000, discardmrk 98000, max wrkr 2, min msgs f. wrkr 40000
6248.424531665:main thread : main Q:Reg: finalizing construction of worker thread pool (numworkerThreads 2)
6248.424540266:main thread : main Q:Reg/w0: finalizing construction of worker instance data (for 13 actions)
6248.424548981:main thread : main Q:Reg/w1: finalizing construction of worker instance data (for 13 actions)
6248.424556559:main thread : main Q: queue finished initialization
6248.424566537:main thread : Main processing queue is initialized and running
6248.424574115:main thread : running module imuxsock with config 0x1ffae80, term mode: cooperative/SIGTTIN
6248.424660225:main thread : running module imklog with config 0x1ffc010, term mode: cancel
6248.424699506:main thread : configuration 0x1fe9520 activated
6248.424714381:main thread : main Q: qqueueAdd: entry added, size now log 1, phys 1 entries
6248.424722179:main thread : main Q:Reg: high activity - starting 1 additional worker thread(s).
6248.424756964:main thread : main Q:Reg: started with state 0, num workers now 1
6248.424764125:main thread : main Q: EnqueueMsg advised worker start
6248.424771887:main thread : rsyslogd: writing pidfile '/var/run/rsyslog.pid'.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment