[Bug 1866573] Re: rsyslog does not contain pmciscoios module

[Brian Candler]

This module is now present in Ubuntu 22.04, so this issue can be closed.

$ cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.04
DISTRIB_CODENAME=jammy
DISTRIB_DESCRIPTION="Ubuntu 22.04.1 LTS"
$ dpkg-query -L rsyslog | grep pmciscoios
/usr/lib/x86_64-linux-gnu/rsyslog/pmciscoios.so

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rsyslog in Ubuntu.
https://bugs.launchpad.net/bugs/1866573

Title:
  rsyslog does not contain pmciscoios module

Status in rsyslog package in Ubuntu:
  New

Bug description:
  rsyslog has a parser module for Cisco IOS formatted syslog messages:
  https://www.rsyslog.com/doc/master/configuration/modules/pmciscoios.html
  https://github.com/rsyslog/rsyslog/tree/master/plugins/pmciscoios

  It has been in rsyslog since early days (8.3.4); Bionic has 8.16.0.

  However, the Ubuntu Bionic package of rsyslog neither compiles
  pmciscoios into the binary, nor includes it as a loadable module.

  To replicate, try these lines in /etc/rsyslog.conf:

  module(load="pmciscoios")
  $RulesetParser rsyslog.ciscoios

  and restart rsyslog; you get these errors

  Mar  8 21:54:39 noc rsyslogd-2066: could not load module '/usr/lib/rsyslog/pmciscoios.so', dlopen: /usr/lib/rsyslog/pmciscoios.so: cannot open shared object file: No such file or directory  [v8.16.0 try http://www.rsyslog.com/e/2066 ]
  Mar  8 21:54:39 noc rsyslogd-2159: error: parser 'rsyslog.ciscoios' unknown at this time (maybe defined too late in rsyslog.conf?) [v8.16.0 try http://www.rsyslog.com/e/2159 ]

  There is "pmcisconames.so", but that is something else:
  https://github.com/rsyslog/rsyslog/blob/master/contrib/pmcisconames/pmcisconames.c

  # dpkg-query -L rsyslog | grep pm.*so
  /usr/lib/rsyslog/pmaixforwardedfrom.so
  /usr/lib/rsyslog/pmlastmsg.so
  /usr/lib/rsyslog/pmsnare.so
  /usr/lib/rsyslog/pmcisconames.so

  There doesn't appear to be a separate package with the module:

  # apt-cache search rsyslog
  ...

  Upstream Debian bug:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929608

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: rsyslog 8.16.0-1ubuntu3.1
  ProcVersionSignature: Ubuntu 4.4.0-166.195-generic 4.4.194
  Uname: Linux 4.4.0-166-generic x86_64
  ApportVersion: 2.20.1-0ubuntu2.19
  Architecture: amd64
  Date: Sun Mar  8 21:53:43 2020
  ProcEnviron:
   SHELL=/bin/bash
   TERM=xterm-256color
   PATH=(custom, no user)
   LANG=en_US.UTF-8
  SourcePackage: rsyslog
  UpgradeStatus: No upgrade log present (probably fresh install)
  mtime.conffile..etc.rsyslog.conf: 2020-03-08T21:53:39.943611

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1866573/+subscriptions