rsyslog does not contain pmciscoios module
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
rsyslog (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
rsyslog has a parser module for Cisco IOS formatted syslog messages:
https:/
https:/
It has been in rsyslog since early days (8.3.4); Bionic has 8.16.0.
However, the Ubuntu Bionic package of rsyslog neither compiles pmciscoios into the binary, nor includes it as a loadable module.
To replicate, try these lines in /etc/rsyslog.conf:
module(
$RulesetParser rsyslog.ciscoios
and restart rsyslog; you get these errors
Mar 8 21:54:39 noc rsyslogd-2066: could not load module '/usr/lib/
Mar 8 21:54:39 noc rsyslogd-2159: error: parser 'rsyslog.ciscoios' unknown at this time (maybe defined too late in rsyslog.conf?) [v8.16.0 try http://
There is "pmcisconames.so", but that is something else:
https:/
# dpkg-query -L rsyslog | grep pm.*so
/usr/lib/
/usr/lib/
/usr/lib/
/usr/lib/
There doesn't appear to be a separate package with the module:
# apt-cache search rsyslog
...
Upstream Debian bug:
https:/
ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: rsyslog 8.16.0-1ubuntu3.1
ProcVersionSign
Uname: Linux 4.4.0-166-generic x86_64
ApportVersion: 2.20.1-0ubuntu2.19
Architecture: amd64
Date: Sun Mar 8 21:53:43 2020
ProcEnviron:
SHELL=/bin/bash
TERM=xterm-
PATH=(custom, no user)
LANG=en_US.UTF-8
SourcePackage: rsyslog
UpgradeStatus: No upgrade log present (probably fresh install)
mtime.conffile.
This module is now present in Ubuntu 22.04, so this issue can be closed.
$ cat /etc/lsb-release RELEASE= 22.04 CODENAME= jammy DESCRIPTION= "Ubuntu 22.04.1 LTS" x86_64- linux-gnu/ rsyslog/ pmciscoios. so
DISTRIB_ID=Ubuntu
DISTRIB_
DISTRIB_
DISTRIB_
$ dpkg-query -L rsyslog | grep pmciscoios
/usr/lib/