<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle"></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi,
<div><br>
</div>
<div>When i was evaluating the configuration of the central logging proof of concept docker image described here: <a href="https://www.freeipa.org/page/Centralized_Logging" target="_blank" style="font-size: 10pt;">https://www.freeipa.org/page/Centralized_Logging</a> i
noticed that the rsyslog mmnormalization rules did not work properly and failed to parse keywords. Elasticsearch indexes does not get properly filled. This lead to the visualizations and dashboards are broken in Kibana. </div>
<div><br>
</div>
<div>The reason is that custom repos was being used to install newer version of rsyslog, rsyslog-mmnormalize and rsyslog-elasticsearch (8.8.0-2), liblognorm (1.1.1-1 and liblogging (1.0.4-4).</div>
<div><br>
</div>
<div>These repos do not work anymore since the content has been removed.</div>
<div><br>
</div>
<div>The repos are:</div>
<div><a href="https://copr-be.cloud.fedoraproject.org/results/jhrozek/rsyslog/" target="_blank" style="font-size: 10pt;">https://copr-be.cloud.fedoraproject.org/results/jhrozek/rsyslog</a></div>
<div><a href="https://copr-be.cloud.fedoraproject.org/results/jhrozek/liblognorm/" target="_blank" style="font-size: 10pt;">https://copr-be.cloud.fedoraproject.org/results/jhrozek/liblognorm</a></div>
<div><a href="https://copr-be.cloud.fedoraproject.org/results/jhrozek/liblogging" target="_blank" style="font-size: 10pt;">https://copr-be.cloud.fedoraproject.org/results/jhrozek/liblogging</a> </div>
<div><br>
</div>
<div>Liblognorm version in RHEL 7 are normally 0.3.7.</div>
<div><br>
</div>
<div>It would be of interest if these newer versions could be made available for RHEL 7 in the near future since they would make RHEL 7 as a log server platform much more interesting. </div>
<div><br>
</div>
</div>
<font face="Times New Roman" size="3">
</font><p class="MsoNormal" style="margin: 0cm 0cm 0pt;"><em><span lang="EN-GB" style='color: #333333; font-family: "Arial","sans-serif"; font-size: 8pt; mso-ansi-language: EN-GB;'>This e-mail is private and confidential between the
sender and the addressee. <o:p></o:p></span></em></p><font face="Times New Roman" size="3">
</font><p class="MsoNormal" style="margin: 0cm 0cm 0pt;"><em><span lang="EN-GB" style='color: #333333; font-family: "Arial","sans-serif"; font-size: 8pt; mso-ansi-language: EN-GB;'>In the event of misdirection, the recipient is
prohibited from using, copying or <o:p></o:p></span></em></p><font face="Times New Roman" size="3">
</font><p class="MsoNormal" style="margin: 0cm 0cm 0pt;"><em><span lang="EN-GB" style='color: #333333; font-family: "Arial","sans-serif"; font-size: 8pt; mso-ansi-language: EN-GB;'>disseminating it or any information in
it. Please notify the above if any misdirection.</span></em><span lang="EN-US" style="mso-ansi-language: EN-US;"><o:p></o:p></span></p><font face="Times New Roman" size="3">
</font></body>
</html>