[SR-Users] log_facility is not always 'LOCAL0' when loadmodule log_custom.so

[Daniel-Constantin Mierla]

Hello,

the log_custom does not implement any syslog-kind-of-protocol, it simply
sends out the plain log message to a remote target, it does not rely on
LOG_LOCAL0 at all.

During startup, till the config is parsed and modules initialized,
various logs can go to the local system, not being handled by log_custom.

Cheers,
Daniel

On 04.07.22 04:39, hanxiaofang wrote:
> Hello Kamailio community
>
> kamailio v5.5.4
> debian10
>
> log_facility is not always 'LOCAL0' when loadmodule log_custom.so
>
> cat /etc/kamailio/kamailio.cfg
>
> ```
> debug=3
> log_stderror=no
> log_facility=LOG_LOCAL0
> children=1
> listen=udp:0.0.0.0:5060
>
> log_engine_type="udp"
> log_engine_data="127.0.0.1:514"
>
> loadmodule "pv.so"
> alias="test.com"
>
> loadmodule "sl.so"
> loadmodule "corex.so"
> loadmodule "kex.so"
> loadmodule "log_custom.so"
>
> request_route {
>         if (uri != myself) {
>                 sl_send_reply("403", "Not relaying");
>                 exit;
>         }
>         sl_send_reply("200", "OK");
>         exit;
> }
> ```
>
> cat /etc/rsyslog.conf
>
> ```
> # /etc/rsyslog.conf configuration file for rsyslog
> #
> # For more information install rsyslog-doc and see
> # /usr/share/doc/rsyslog-doc/html/configuration/index.html
>
> #################
> #### MODULES ####
> #################
>
> module(load="imuxsock") # provides support for local system logging
> module(load="imklog")   # provides kernel logging support
> #module(load="immark")  # provides --MARK-- message capability
>
> # provides UDP syslog reception
> module(load="imudp")
> input(type="imudp" port="514")
>
> # provides TCP syslog reception
> module(load="imtcp")
> input(type="imtcp" port="514")
>
> ###########################
> #### GLOBAL DIRECTIVES ####
> ###########################
>
> #
> # Use traditional timestamp format.
> # To enable high precision timestamps, comment out the following line.
> #
> #$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
> $ActionFileDefaultTemplate RSYSLOG_DebugFormat
>
> #
> # Set the default permissions for all log files.
> #
> $FileOwner root
> $FileGroup adm
> $FileCreateMode 0640
> $DirCreateMode 0755
> $Umask 0022
>
> #
> # Where to place spool and state files
> #
> $WorkDirectory /var/spool/rsyslog
>
> #
> # Include all config files in /etc/rsyslog.d/
> #
> $IncludeConfig /etc/rsyslog.d/*.conf
>
> ###############
> #### RULES ####
> ###############
>
> #
> # First some standard log files.  Log by facility.
> #
> auth,authpriv.*                 /var/log/auth.log
> *.*;auth,authpriv.none          -/var/log/syslog
> #cron.*                         /var/log/cron.log
> daemon.*                        -/var/log/daemon.log
> kern.*                          -/var/log/kern.log
> lpr.*                           -/var/log/lpr.log
> mail.*                          -/var/log/mail.log
> user.*                          -/var/log/user.log
>
> #
> # Logging for the mail system.  Split it up so that
> # it is easy to write scripts to parse these files.
> #
> mail.info                       -/var/log/mail.info
> mail.warn                       -/var/log/mail.warn
> mail.err                        /var/log/mail.err
>
> #
> # Some "catch-all" log files.
> #
> *.=debug;\
>         auth,authpriv.none;\
>         news.none;mail.none     -/var/log/debug
> *.=info;*.=notice;*.=warn;\
>         auth,authpriv.none;\
>         cron,daemon.none;\
>         mail,news.none          -/var/log/messages
>
> #
> # Emergencies are sent to everybody logged in.
> #
> *.emerg                         :omusrmsg:*
> ```
>
> cat /var/log/messages
>
> ```
> Debug line with all properties:
> FROMHOST: 'kam', fromhost-ip: '127.0.0.1', HOSTNAME: 'kam', PRI: 134,
> syslogtag 'kamailio:', programname: 'kamailio', APP-NAME: 'kamailio',
> PROCID: '-', MSGID: '-',
> TIMESTAMP: 'Jul  4 10:25:07', STRUCTURED-DATA: '-',
> msg: ' INFO: <core> [core/sctp_core.c:74]: sctp_core_check_support():
> SCTP API not enabled - if you want to use it, load sctp module'
> escaped msg: ' INFO: <core> [core/sctp_core.c:74]:
> sctp_core_check_support(): SCTP API not enabled - if you want to use
> it, load sctp module'
> inputname: imuxsock rawmsg: '<134>Jul  4 10:25:07 kamailio: INFO:
> <core> [core/sctp_core.c:74]: sctp_core_check_support(): SCTP API not
> enabled - if you want to use it, load sctp module'
> $!:
> $.:
> $/:
>
[..]

-- 
Daniel-Constantin Mierla -- www.asipto.com
www.twitter.com/miconda -- www.linkedin.com/in/miconda
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20220704/05054fc2/attachment.htm>