imzeromq problem

[bradziszewski]

hello,

Have problem to log msg over imzeromq.

my rsyslog.conf:

$ModLoad omzeromq.so
$ModLoad imzeromq.so
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$FileOwner root
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$IncludeConfig /etc/rsyslog.d/.conf
$RuleSet Events
*. /var/log/zmq
$InputZeroMQServerBindRuleset Events
$InputZeroMQServerRun pattern=sub,bind=tcp://:5557,subscribe=AAA
$Ruleset RSYSLOG_DefaultRuleset
auth,authpriv. /var/log/auth.log
.;auth,authpriv.none -/var/log/syslog
daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
lpr.* -/var/log/lpr.log
mail.* -/var/log/mail.log
user.* -/var/log/user.log
mail.info -/var/log/mail.info
mail.warn -/var/log/mail.warn
mail.err /var/log/mail.err
news.crit /var/log/news/news.crit
news.err /var/log/news/news.err
news.notice -/var/log/news/news.notice
.=debug;
auth,authpriv.none;
news.none;mail.none -/var/log/debug
*.=info;.=notice;.=warn;
auth,authpriv.none;
cron,daemon.none;
mail,news.none -/var/log/messages
*.emerg :omusrmsg:
daemon.;mail.;
news.err;
.=debug;.=info;
.=notice;.=warn |/dev/xconsole

my client:

!/usr/bin/python

import zmq

context = zmq.Context()
socket = context.socket(zmq.PUB)
socket.connect("tcp://127.0.0.1:5557")

for request in range(1,10):
#msg = "<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - %% It's time to make the do-nuts"
msg = "AAA <165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - %% It's time to make the do-nuts"
socket.send(msg)
print "Sending", msg

and it's my rsyslog debug output:

1743.488976403:7f99ecc5b700: main Q: entry added, size now log 1, phys 1 entries
1743.489018807:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489034120:7f99ecc5b700: main Q: entry added, size now log 2, phys 2 entries
1743.489044840:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489057438:7f99ecc5b700: main Q: entry added, size now log 3, phys 3 entries
1743.489067729:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489080124:7f99ecc5b700: main Q: entry added, size now log 4, phys 4 entries
1743.489091634:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489104004:7f99ecc5b700: main Q: entry added, size now log 5, phys 5 entries
1743.489114188:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489126492:7f99ecc5b700: main Q: entry added, size now log 6, phys 6 entries
1743.489136705:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489148932:7f99ecc5b700: main Q: entry added, size now log 7, phys 7 entries
1743.489159109:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489171285:7f99ecc5b700: main Q: entry added, size now log 8, phys 8 entries
1743.489181578:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489193808:7f99ecc5b700: main Q: entry added, size now log 9, phys 9 entries
1743.489204067:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489279267:7f99ee45e700: wti 0x25c7d40: worker awoke from idle processing
1743.489296721:7f99ee45e700: we deleted 0 objects and enqueued 0 objects
1743.489304321:7f99ee45e700: delete batch from store, new sizes: log 9, phys 9
1743.489314069:7f99ee45e700: processBatch: batch of 9 elements must be processed
1743.489321864:7f99ee45e700: Processing next rule
1743.489329655:7f99ee45e700: testing filter, f_pmask 0
1743.489336813:7f99ee45e700: testing filter, f_pmask 0
1743.489343783:7f99ee45e700: testing filter, f_pmask 0
1743.489350761:7f99ee45e700: testing filter, f_pmask 0
1743.489357717:7f99ee45e700: testing filter, f_pmask 0
1743.489364714:7f99ee45e700: testing filter, f_pmask 0
1743.489371725:7f99ee45e700: testing filter, f_pmask 0
1743.489378737:7f99ee45e700: testing filter, f_pmask 0
1743.489385726:7f99ee45e700: testing filter, f_pmask 0
1743.489393080:7f99ee45e700: Processing next action
1743.489401967:7f99ee45e700: Called action(Batch), logging to builtin-file
1743.489410774:7f99ee45e700: XXXXX: tryDoAction 0x25d14c0, pnElem 9, nElem 9
1743.489418868:7f99ee45e700: ruleset: get iRet 0 from rule.ProcessMsg()
1743.489426216:7f99ee45e700: ruleset.ProcessMsg() returns 0
1743.489433757:7f99ee45e700: regular consumer finished, iret=0, szlog 0 sz phys 9
1743.489443851:7f99ee45e700: we deleted 9 objects and enqueued 0 objects
1743.489451343:7f99ee45e700: delete batch from store, new sizes: log 0, phys 0
1743.489478114:7f99ee45e700: regular consumer finished, iret=4, szlog 0 sz phys 0
1743.489485641:7f99ee45e700: main Q:Reg/w0: worker IDLE, waiting for work.

Any ideas what i'm doing wrong?

Regards,
Bartek

[ksedgwic]

On 03/06/2012 12:16 AM, bradziszewski wrote:

hello,

Have problem to log msg over imzeromq.

my rsyslog.conf:

$ModLoad omzeromq.so
$ModLoad imzeromq.so
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$FileOwner root
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$IncludeConfig /etc/rsyslog.d/.conf
$RuleSet Events
*. /var/log/zmq
$InputZeroMQServerBindRuleset Events
$InputZeroMQServerRun pattern=sub,bind=tcp://:5557,subscribe=AAA
$Ruleset RSYSLOG_DefaultRuleset
auth,authpriv. /var/log/auth.log
.;auth,authpriv.none -/var/log/syslog
daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
lpr.* -/var/log/lpr.log
mail.* -/var/log/mail.log
user.* -/var/log/user.log
mail.info -/var/log/mail.info
mail.warn -/var/log/mail.warn
mail.err /var/log/mail.err
news.crit /var/log/news/news.crit
news.err /var/log/news/news.err
news.notice -/var/log/news/news.notice
.=debug;
auth,authpriv.none;
news.none;mail.none -/var/log/debug
*.=info;.=notice;.=warn;
auth,authpriv.none;
cron,daemon.none;
mail,news.none -/var/log/messages
*.emerg :omusrmsg:
daemon.;mail.;
news.err;
.=debug;.=info;
.=notice;.=warn |/dev/xconsole

my client:

#!/usr/bin/python
import zmq

context = zmq.Context()
socket = context.socket(zmq.PUB)
socket.connect("tcp://127.0.0.1:5557")

for request in range(1,10):
#msg = "<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - %% It's time to make the do-nuts"
msg = "AAA<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - %% It's time to make the do-nuts"
socket.send(msg)
print "Sending", msg

and it's my rsyslog debug output:

1743.488976403:7f99ecc5b700: main Q: entry added, size now log 1, phys 1 entries
1743.489018807:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489034120:7f99ecc5b700: main Q: entry added, size now log 2, phys 2 entries
1743.489044840:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489057438:7f99ecc5b700: main Q: entry added, size now log 3, phys 3 entries
1743.489067729:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489080124:7f99ecc5b700: main Q: entry added, size now log 4, phys 4 entries
1743.489091634:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489104004:7f99ecc5b700: main Q: entry added, size now log 5, phys 5 entries
1743.489114188:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489126492:7f99ecc5b700: main Q: entry added, size now log 6, phys 6 entries
1743.489136705:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489148932:7f99ecc5b700: main Q: entry added, size now log 7, phys 7 entries
1743.489159109:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489171285:7f99ecc5b700: main Q: entry added, size now log 8, phys 8 entries
1743.489181578:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489193808:7f99ecc5b700: main Q: entry added, size now log 9, phys 9 entries
1743.489204067:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489279267:7f99ee45e700: wti 0x25c7d40: worker awoke from idle processing
1743.489296721:7f99ee45e700: we deleted 0 objects and enqueued 0 objects
1743.489304321:7f99ee45e700: delete batch from store, new sizes: log 9, phys 9
1743.489314069:7f99ee45e700: processBatch: batch of 9 elements must be processed
1743.489321864:7f99ee45e700: Processing next rule
1743.489329655:7f99ee45e700: testing filter, f_pmask 0
1743.489336813:7f99ee45e700: testing filter, f_pmask 0
1743.489343783:7f99ee45e700: testing filter, f_pmask 0
1743.489350761:7f99ee45e700: testing filter, f_pmask 0
1743.489357717:7f99ee45e700: testing filter, f_pmask 0
1743.489364714:7f99ee45e700: testing filter, f_pmask 0
1743.489371725:7f99ee45e700: testing filter, f_pmask 0
1743.489378737:7f99ee45e700: testing filter, f_pmask 0
1743.489385726:7f99ee45e700: testing filter, f_pmask 0
1743.489393080:7f99ee45e700: Processing next action
1743.489401967:7f99ee45e700: Called action(Batch), logging to builtin-file
1743.489410774:7f99ee45e700: XXXXX: tryDoAction 0x25d14c0, pnElem 9, nElem 9
1743.489418868:7f99ee45e700: ruleset: get iRet 0 from rule.ProcessMsg()
1743.489426216:7f99ee45e700: ruleset.ProcessMsg() returns 0
1743.489433757:7f99ee45e700: regular consumer finished, iret=0, szlog 0 sz phys 9
1743.489443851:7f99ee45e700: we deleted 9 objects and enqueued 0 objects
1743.489451343:7f99ee45e700: delete batch from store, new sizes: log 0, phys 0
1743.489478114:7f99ee45e700: regular consumer finished, iret=4, szlog 0 sz phys 0
1743.489485641:7f99ee45e700: main Q:Reg/w0: worker IDLE, waiting for work.

Any ideas what i'm doing wrong?

Bartek,

I don't see anything obviously wrong with your config.

When I run rsyslog I see some verbose startup debugging regarding the
parsing of the config file and loading of the module ... I don't see
that in your output. Is there some earlier startup logging regarding
the module?

Ken

Ken Sedgwick
Bonsai Software, Inc.
http://www.bonsai.com/ken/
(510) 269-7334
ken@bonsai.com
Public Key: http://www.bonsai.com/ken/ken.asc
GPG Fingerprint: 851E 3B07 E586 0843 9434 5CC7 4033 3B9B 3F3F 9640

[bradziszewski]

On 03/06/12 22:59, Ken Sedgwick wrote:

On 03/06/2012 12:16 AM, bradziszewski wrote:

hello,

Have problem to log msg over imzeromq.

my rsyslog.conf:

$ModLoad omzeromq.so
$ModLoad imzeromq.so
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$FileOwner root
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$IncludeConfig /etc/rsyslog.d/.conf
$RuleSet Events
*. /var/log/zmq
$InputZeroMQServerBindRuleset Events
$InputZeroMQServerRun pattern=sub,bind=tcp://:5557,subscribe=AAA
$Ruleset RSYSLOG_DefaultRuleset
auth,authpriv. /var/log/auth.log
.;auth,authpriv.none -/var/log/syslog
daemon.* -/var/log/daemon.log
kern.* -/var/log/kern.log
lpr.* -/var/log/lpr.log
mail.* -/var/log/mail.log
user.* -/var/log/user.log
mail.info -/var/log/mail.info
mail.warn -/var/log/mail.warn
mail.err /var/log/mail.err
news.crit /var/log/news/news.crit
news.err /var/log/news/news.err
news.notice -/var/log/news/news.notice
.=debug;
auth,authpriv.none;
news.none;mail.none -/var/log/debug
*.=info;.=notice;.=warn;
auth,authpriv.none;
cron,daemon.none;
mail,news.none -/var/log/messages
*.emerg :omusrmsg:
daemon.;mail.;
news.err;
.=debug;.=info;
.=notice;.=warn |/dev/xconsole

my client:

#!/usr/bin/python
import zmq

context = zmq.Context()
socket = context.socket(zmq.PUB)
socket.connect("tcp://127.0.0.1:5557")

for request in range(1,10):
#msg = "<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - %% It's time to make the do-nuts"
msg = "AAA<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - %% It's time to make the do-nuts"
socket.send(msg)
print "Sending", msg

and it's my rsyslog debug output:

1743.488976403:7f99ecc5b700: main Q: entry added, size now log 1, phys 1 entries
1743.489018807:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489034120:7f99ecc5b700: main Q: entry added, size now log 2, phys 2 entries
1743.489044840:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489057438:7f99ecc5b700: main Q: entry added, size now log 3, phys 3 entries
1743.489067729:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489080124:7f99ecc5b700: main Q: entry added, size now log 4, phys 4 entries
1743.489091634:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489104004:7f99ecc5b700: main Q: entry added, size now log 5, phys 5 entries
1743.489114188:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489126492:7f99ecc5b700: main Q: entry added, size now log 6, phys 6 entries
1743.489136705:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489148932:7f99ecc5b700: main Q: entry added, size now log 7, phys 7 entries
1743.489159109:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489171285:7f99ecc5b700: main Q: entry added, size now log 8, phys 8 entries
1743.489181578:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489193808:7f99ecc5b700: main Q: entry added, size now log 9, phys 9 entries
1743.489204067:7f99ecc5b700: main Q: EnqueueMsg advised worker start
1743.489279267:7f99ee45e700: wti 0x25c7d40: worker awoke from idle processing
1743.489296721:7f99ee45e700: we deleted 0 objects and enqueued 0 objects
1743.489304321:7f99ee45e700: delete batch from store, new sizes: log 9, phys 9
1743.489314069:7f99ee45e700: processBatch: batch of 9 elements must be processed
1743.489321864:7f99ee45e700: Processing next rule
1743.489329655:7f99ee45e700: testing filter, f_pmask 0
1743.489336813:7f99ee45e700: testing filter, f_pmask 0
1743.489343783:7f99ee45e700: testing filter, f_pmask 0
1743.489350761:7f99ee45e700: testing filter, f_pmask 0
1743.489357717:7f99ee45e700: testing filter, f_pmask 0
1743.489364714:7f99ee45e700: testing filter, f_pmask 0
1743.489371725:7f99ee45e700: testing filter, f_pmask 0
1743.489378737:7f99ee45e700: testing filter, f_pmask 0
1743.489385726:7f99ee45e700: testing filter, f_pmask 0
1743.489393080:7f99ee45e700: Processing next action
1743.489401967:7f99ee45e700: Called action(Batch), logging to builtin-file
1743.489410774:7f99ee45e700: XXXXX: tryDoAction 0x25d14c0, pnElem 9, nElem 9
1743.489418868:7f99ee45e700: ruleset: get iRet 0 from rule.ProcessMsg()
1743.489426216:7f99ee45e700: ruleset.ProcessMsg() returns 0
1743.489433757:7f99ee45e700: regular consumer finished, iret=0, szlog 0 sz phys 9
1743.489443851:7f99ee45e700: we deleted 9 objects and enqueued 0 objects
1743.489451343:7f99ee45e700: delete batch from store, new sizes: log 0, phys 0
1743.489478114:7f99ee45e700: regular consumer finished, iret=4, szlog 0 sz phys 0
1743.489485641:7f99ee45e700: main Q:Reg/w0: worker IDLE, waiting for work.

Any ideas what i'm doing wrong?
Bartek,

I don't see anything obviously wrong with your config.

When I run rsyslog I see some verbose startup debugging regarding the
parsing of the config file and loading of the module ... I don't see
that in your output. Is there some earlier startup logging regarding
the module?

Ken

Hi Ken,

Thanks for your quick answer.

To ratify log that i sent in previous mail showing only debug when i'm
running test.py client (sending 9 messages to rsyslog).

Sending you rsyslog startup debug output containing loading of the module..

Thanks and hope it help,
Bartek

0454.242864820:7fb69607d700: cfline: '$ModLoad omzeromq.so'
0454.243051529:7fb69607d700: Requested to load module 'omzeromq.so'
0454.243182242:7fb69607d700: loading module '/usr/lib/rsyslog/omzeromq.so'
0454.245284881:7fb69607d700: module of type 1 being loaded.
0454.245433700:7fb69607d700: entry point 'doHUP' not present in module
0454.245569490:7fb69607d700: entry point 'beginTransaction' not present
in module
0454.245767417:7fb69607d700: entry point 'endTransaction' not present in
module
0454.245842926:7fb69607d700: cfline: '$ModLoad imzeromq.so'
0454.245915994:7fb69607d700: Requested to load module 'imzeromq.so'
0454.245988119:7fb69607d700: loading module '/usr/lib/rsyslog/imzeromq.so'
0454.246149331:7fb69607d700: module of type 0 being loaded.
0454.246325877:7fb69607d700: cfline: '$ActionFileDefaultTemplate
RSYSLOG_TraditionalFileFormat'
0454.246440309:7fb69607d700: doGetWord: get newval
'RSYSLOG_TraditionalFileFormat' (len 29), hdlr (nil)
0454.246642088:7fb69607d700: cfline: '$FileOwner root'
0454.247101559:7fb69607d700: uid 0 obtained for user 'root'
0454.247224483:7fb69607d700: cfline: '$FileGroup adm'
0454.247425917:7fb69607d700: gid 4 obtained for group 'adm'
0454.247622419:7fb69607d700: cfline: '$FileCreateMode 0640'
0454.247727752:7fb69607d700: cfline: '$DirCreateMode 0755'
0454.247891019:7fb69607d700: cfline: '$Umask 0022'
0454.248036872:7fb69607d700: umask set to 0022.
0454.248191562:7fb69607d700: cfline: '$IncludeConfig /etc/rsyslog.d/.conf'
0454.248361102:7fb69607d700: requested to include config file
'/etc/rsyslog.d/postfix.conf'
0454.248536712:7fb69607d700: cfline: '$AddUnixListenSocket
/var/spool/postfix/dev/log'
0454.248642414:7fb69607d700: doGetWord: get newval
'/var/spool/postfix/dev/log' (len 26), hdlr 0x7fb694c4bc40
0454.248768915:7fb69607d700: cfline: '$RuleSet remote'
0454.248850900:7fb69607d700: doGetWord: get newval 'remote' (len 6),
hdlr 0x40c430
0454.248922880:7fb69607d700: begin new current rule set 'remote'
0454.249075950:7fb69607d700: cfline: '.* '
0454.249207078:7fb69607d700: - traditional PRI filter
0454.249420656:7fb69607d700: symbolic name: * ==> 255
0454.249709487:7fb69607d700: tried selector action for builtin-file: -2001
0454.249809925:7fb69607d700: tried selector action for builtin-pipe: -2001
0454.249889289:7fb69607d700: tried selector action for builtin-fwd: -2001
0454.250102164:7fb69607d700: tried selector action for builtin-shell: -2001
0454.250232571:7fb69607d700: tried selector action for builtin-discard:
-2001
0454.250395096:7fb69607d700: write-alltried selector action for
builtin-usrmsg: 0
0454.250546037:7fb69607d700: Module builtin-usrmsg processed this config
line.
0454.250714246:7fb69607d700: template: ' WallFmt' assigned
0454.250826968:7fb69607d700: action 1 queue: save on shutdown 1, max
disk space allowed 0
0454.250936985:7fb69607d700: action 1 queue: type 3, enq-only 0, disk
assisted 0, maxFileSz 1048576, lqsize 0, pqsize 0, child 0, full delay
970, light delay 700, deq batch size 16 starting
0454.251110864:7fb69607d700: Action 0x1b10e70: queue 0x1b10f60 created
0454.251196824:7fb69607d700: cfline: '$InputZeroMQServerBindRuleset remote'
0454.251311486:7fb69607d700: doGetWord: get newval 'remote' (len 6),
hdlr 0x7fb693808410
0454.251386335:7fb69607d700: imzeromq current bind ruleset 0x1b104e0:
'remote'
0454.251568701:7fb69607d700: cfline: '$InputZeroMQServerRun
pattern=sub,bind=tcp://:5557,subscribe=AAA'
0454.251695049:7fb69607d700: doGetWord: get newval
'pattern=sub,bind=tcp://:5557,subscribe=AAA' (len 43), hdlr 0x7fb6938084b0
0454.252364917:7fb69607d700: cfline: '$Ruleset RSYSLOG_DefaultRuleset'
0454.252511846:7fb69607d700: doGetWord: get newval
'RSYSLOG_DefaultRuleset' (len 22), hdlr 0x40c430
0454.252619144:7fb69607d700: current rule set changed to 0x1b07b10:
'RSYSLOG_DefaultRuleset'
0454.252805307:7fb69607d700: cfline: 'auth,authpriv.
/var/log/auth.log'
0454.252918684:7fb69607d700: selector line successfully processed

[ksedgwic]

On 03/06/2012 10:14 PM, bartek wrote:

To ratify log that i sent in previous mail showing only debug when i'm
running test.py client (sending 9 messages to rsyslog).

Sending you rsyslog startup debug output containing loading of the module..

Bartek,

That output all looks pretty normal to me.

Let me take a look at the problem and see if I can't duplicate it ...

Thanks again!

Ken

Ken Sedgwick
Bonsai Software, Inc.
http://www.bonsai.com/ken/
(510) 269-7334
ken@bonsai.com
Public Key: http://www.bonsai.com/ken/ken.asc
GPG Fingerprint: 851E 3B07 E586 0843 9434 5CC7 4033 3B9B 3F3F 9640

[bradziszewski]

Hi Ken,

Any luck?

Greets!

[ksedgwic]

On 03/13/2012 11:56 AM, bartek wrote:

Hi Ken,

Any luck?

Bartek,

Apologies, I've been too busy to get to this yet. I'm hopeful I can
look at it tomorrow (Thu).

Ken

Ken Sedgwick
Bonsai Software, Inc.
http://www.bonsai.com/ken/
(510) 269-7334
ken@bonsai.com
Public Key: http://www.bonsai.com/ken/ken.asc
GPG Fingerprint: 851E 3B07 E586 0843 9434 5CC7 4033 3B9B 3F3F 9640

[bradziszewski]

no problem, let me know if you need any help

[ksedgwic]

On 03/14/2012 12:30 PM, bartek wrote:

no problem, let me know if you need any help

Bartek,

I had a little time to look at the issue.

First, I tried things out using late-model rsyslog (version 6.x) and
zeromq (version 3.x), it is possible there are different problems with
the earlier version.

I was able to get things to work as expected.

1. I used a different bind specifier then you are in my rsyslog.conf file:

$InputZeroMQServerRun pattern=sub,bind=tcp://*:5557,subscribe=

(note the '*')

2. I used an empty subscribe pattern.

Could you try your setup with these two changes (maybe one at a time)?

Apologies that I didn't have more time to explore non-empty subscribe
patterns ...

Ken

Ken Sedgwick
Bonsai Software, Inc.
http://www.bonsai.com/ken/
(510) 269-7334
ken@bonsai.com
Public Key: http://www.bonsai.com/ken/ken.asc
GPG Fingerprint: 851E 3B07 E586 0843 9434 5CC7 4033 3B9B 3F3F 9640