[rsyslog] Separating logs by host?

[Scott Baker]

Rainer Gerhards wrote:
> Looks like doc can need some more guides ;)
> 
> Does this help: http://www.rsyslog.com/Article60.phtml

Excellent... doing this causes all messages to be logged in that
format. Even local messages from the box (cron, mail, authpriv, etc)
to go into that format.

Can I apply that logging statement to a group of IPs? I have a bunch
of DSL equipment that logs. It would be nice if I could break all my
equipment out like:

Routers: /var/log/routers-%$NOW%.log
DSL: /var/log/dsl-%$NOW%.log
Dial-up: /var/log/dial--%$NOW%.log

Each/Any of those groups could have one or many sources. We have
about 13 unique DSL devices that should all probably go in the same
log for simplicity. It would be REALLY cool to be able to say
something like:

192.168.1.1/24:*.*                    /var/log/dsl-%$NOW%.log
192.168.3.1/24,10.1.1.1/24:*.*        /var/log/routers-%$NOW%.log

Am I just dreaming or is that possible?

Also why is the next version of rsyslog (after reading your blog)
going to be version 3 and not 2.0?

-- 
Scott Baker - Canby Telcom
RHCE - System Administrator - 503.266.8253