rsyslog adding characters to log lines

Hi all,


I wonder if anyone can offer an explanation or fix for this. We send all of our FW log data to rsyslog, which in-turn has Filebeat sending the log lines to Logstash. Rsyslog appears to be adding extra characters in the log lines, like so -

<158>1 2019-09-03T06:53:37.117+01:00 CLUSTER0-n2 - - -2 - PFE_FW_SYSLOG_IP: FW: reth0.0
<158>1 2019-09-03T06:53:38.113+01:00 CLUSTER0-n2 - - -2 - PFE_FW_SYSLOG_IP: FW: reth0.0

What I'd expect is actually -

<158>1 2019-09-03T06:53:28.112+01:00 CLUSTER0-n2 - - - - PFE_FW_SYSLOG_IP: FW: reth0.0
<158>1 2019-09-03T06:53:37.114+01:00 CLUSTER0-n2 - - - - PFE_FW_SYSLOG_IP: FW: reth0.0

As a consequence, some of the Logstash rules we have aren't matching.

I know I could rewrite the Logstash rules to fix this, but a PCAP shows that the sending device which is exporting to rsyslog isn't itself adding the extra characters in. The next in-line is rsyslog as the receiver and writer to disk.

Does anyone have any idea why this is happening, or how to fix it? It's happening on two hosts, which are VM's and have no underlying hardware or resource issues.

Cheers

Andy

https://redd.it/cz2a21
@r_linux

ddgr - DuckDuckGo from the terminal v1.7 released!
https://github.com/jarun/ddgr/releases/tag/v1.7

https://redd.it/cz4s3l
@r_linux

Why does ext4 have block groups?



https://redd.it/cz4ddt
@r_linux

Firefox 69 released
https://www.mozilla.org/en-US/firefox/69.0/releasenotes/

https://redd.it/cz6bed
@r_linux

Warsaw (Poland) transport system uses terminal to show tram timetables
https://redd.it/cz6fwz
@r_linux

Apparently They Use KDE and LibreOffice In the Afterlife (The Good Place)
https://redd.it/cz7d7t
@r_linux

reddio v0.3 released (command-line interface for Reddit)
https://gitlab.com/aaronNG/reddio/-/tags/v0.3

https://redd.it/cz6vu4
@r_linux

systemd 243 released
https://lists.freedesktop.org/archives/systemd-devel/2019-September/043401.html

https://redd.it/cz6afn
@r_linux

Anybody moved after years on advanced distros (Gentoo, Void, Arch, Debian) to more user friendly ones (Fedora, Ubuntu, Solus)? Why you did and which one you chose?

Thinking of moving from Void to Fedora when the 31 Beta arrives.

But every time i do something like that, i end up coming back and setting everything up again. Then in the middle of setting everything up, i get fed up and wish i had stayed in the more "automated" distros.

https://redd.it/cz8ich
@r_linux

Teardown of a Failed Linux LTS Spectre Fix
https://grsecurity.net/teardown_of_a_failed_linux_lts_spectre_fix.php

https://redd.it/cza2w6
@r_linux

Any architects (buildings, not software) here who use a linux at work?

Hey everyone,

I was wondering whether Linux could be a daily driver for architects. Is there any proprietary software that would give problems?

A young friend of mine has started studying architecture and was working in an architects office where everyone told her to buy a MacBook. 1k € is way too much for a student (apart from the obvious fact that mac is utter garbage). She was now asking me whether to go for it or not, but I can't really tell her to go for Linux since I absolutely don't know if that will give her trouble down the line, considering some proprietory software that every architect uses of which I don't know of.

Any architects who use Linux as their daily driver that can shed some light?

Have a nice day!

https://redd.it/cz7cq2
@r_linux

Charging Money For Linux Distros And Open Source Software? It's More Successful Than You Think
https://www.forbes.com/sites/jasonevangelho/2019/09/03/paying-for-linux-distros-and-foss-software-successful-elementary-os/amp/

https://redd.it/czcb9l
@r_linux

Librem 5 is Chonky
https://redd.it/czda4t
@r_linux

Linux news: Latest Linux kernel updates by core kernel developer Greg Kr...
https://www.youtube.com/watch?v=KvCkr75H2kY&feature=share

https://redd.it/cz6406
@r_linux

More Linux users than Mac in my CS class
https://redd.it/cze4t7
@r_linux

Linux Mint creates XApp.StatusIcon to replace deprecated GTK.StatusIcon to preserve App Indicators support
https://blog.linuxmint.com/?p=3795

https://redd.it/czfd5s
@r_linux

Weekly Questions and Hardware Thread - September 04, 2019

Welcome to r/linux! If you're new to Linux or trying to get started this thread is for you. Get help here or as always, check out r/linuxquestions or r/linux4noobs

This megathread is for all your question needs. As we don't allow questions on r/linux outside of this megathread, please consider using r/linuxquestions or r/linux4noobs for the best solution to your problem.

Ask your hardware requests here too or try r/linuxhardware!

https://redd.it/czfve9
@r_linux

PCManFM-Qt and custom home-made actions in contex-menu

Can you describe step by step the necessary actions to add custom commands, in the contextual menu in this file manager, when I right-click on a file or folder?

https://redd.it/czg1d5
@r_linux

Porting desktop environment from one distro to another distro

Hello everyone,

I am quite new to Linux. I just came across the distribution called Enso OS. And so far, I really love the desktop environment of this distribution. It is XFCE but all the transition, animation, and overall design are very nice. However, I would like to use Manjaro. Is it possible to port the desktop environment From Enso OS to Manjaro?

Thank you.

https://redd.it/czh2dq
@r_linux

Linux desktop note taking app in 2019

I want to use a note taking app to replace my .txt system. My criteria are:

- works on Linux (Ubuntu lts)
- free software (very much prefer so)
- native app or at least resourceful (so no electron or java stuff)
- respects my privacy
- self-hosted sync is possible (using my openmediavault server)
- has an android client
- doesn't require to signup to a service
- is preferably maintained


I came across a few apps like evernote and simplenote but they seem to require an account, which I am opposed to.
I am looking forward to your recommendations.

https://redd.it/czh0ac
@r_linux

Failed messages at boot time

While I boot my linux machine I get some msg: \[Failed\] Failed to start <some systemd service>. I mention the parameter Restart=Always in .service file and the service get successfully start after few sec. On every boot the failed comes for one time for this service and after that service restart successfully.

But I want to eliminate the failed completely. How should I debug this?

https://redd.it/czhpei
@r_linux