Description of problem: A Warning for using pre-v6 syntax isn't issued when it should be and vice versa. Version-Release number of selected component (if applicable): rsyslog-7.4.7-1.fc21 How reproducible: Always. Steps to Reproduce: $ cp /etc/rsyslog.conf{,.bck} $ cat > /etc/rsyslog.conf <<EOF $modload omjournal *.* :omjournal: EOF $ systemctl restart rsyslog $ grep "rsyslogd-(2207|2215)" /var/log/messages Jan 16 06:22:13 rhel-7 rsyslogd-2207: error during parsing file /etc/rsyslog.conf, on or before line 2: errors occured in file '/etc/rsyslog.conf' around line 146 [try http://www.rsyslog.com/e/2207 ] $ sed -i -e 's/:omjournal:/:foo:/' /etc/rsyslog.conf $ systemctl restart rsyslog $ grep "rsyslogd-(2207|2215)" /var/log/messages Jan 16 06:22:13 rhel-7 rsyslogd-2215: omjournal supports only v6+ config format, use: action(type="omjournal" ...) [try http://www.rsyslog.com/e/2215 ] Jan 16 06:22:13 rhel-7 rsyslogd-2207: error during parsing file /etc/rsyslog.conf, on or before line 2: errors occured in file '/etc/rsyslog.conf' around line 146 [try http://www.rsyslog.com/e/2207 ] Actual results: The warning is displayed for actions other than ":omjournal:" and not when they should be. Expected results: The reverse of the current state.
Created attachment 851012 [details] fix for the issue