View Issue Details

IDProjectCategoryView StatusLast Update
0005839CentOS-6rsyslogpublic2012-07-15 20:05
Status newResolutionopen 
Product Version6.3 
Target VersionFixed in Version 
Summary0005839: rsyslog 5.8.10-2 - PreserveFQDN directive
DescriptionI recently upgraded a server from CentOS 6.2 to 6.3
I found a change in the behavior of rsyslog's configuration file that I found particularly interesting.
The "$PreserveFQDN on" directive was not being recognized as the config remained unchanged during the upgrade. This incorrect behavior caused the host to syslog with only the host name and not it's fully qualified domain name.

Name : rsyslog
Arch : i686
Version : 5.8.10
Release : 2.el6

The official 6.2 mirror has rsyslog-4.6.2-12.el6.i686.rpm and 6.3 has
rsyslog-5.8.10-2.el6.i686.rpm, so there's quite a version jump here.
Steps To Reproduce1) Install rsyslog 5.8.10-2 on CentOS 6.3
2) Add a directive to debug rsyslog in /etc/rsyslog.conf
# debug rsyslog
# - intense logging, disable this when finished
*.* /tmp/rsyslog.debug
3) tail -f /tmp/rsyslog.debug
3a) You will find that the FQDN is not used by default as expected
4) Set the directive "$PreserveFQDN on" where it is the first directive and reload rsyslog
5) continue tailing /tmp/rsyslog.debug
5a) You should find that FQDN is not being used
6) Move "$PreserveFQDN on" so it is _not_ the first directive and reload rsyslog
7) continue tailing /tmp/rsyslog.debug
7a) You should find that FQDN directive is _not_ honored now
[ _unless_ "$PreserveFQDN on" is set as the first directive ]
Additional InformationMy post to the mailing list:

Another bug report for a previous version of rsyslog:

Config Snippet:
#rsyslog v3 config file
$PreserveFQDN on

# if you experience problems, check
# for assistance

#### MODULES ####

$ModLoad # provides support for local system logging
(e.g. via logger command)
$ModLoad # provides kernel logging support (previously
done by rklogd)
#$ModLoad # provides --MARK-- message capability

# Provides UDP syslog reception
#$UDPServerRun 514

# Provides TCP syslog reception
#$InputTCPServerRun 514


# Use default timestamp format
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
# (BUG!)
# FQDN must be the first directive or it is not honored
#$PreserveFQDN on
... omitted...

I did find a workaround [0] [1], but feel this behavior is a bug.
Note the bugreport linked previously was for version 5.4.0 and reported in July 2010.
If I make $PreserveFQDN the _first_ directive it syslogs with the FQDN otherwise the directive is ignored.

TagsNo tags attached.


There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2012-07-15 20:05 silvertip257 New Issue