[rsyslog] Separating logs by host?
rgerhards at hq.adiscon.com
Thu Dec 20 22:50:11 CET 2007
I need to think about the real question a bit ;) Not an immediate
solution ... but not hopeless either ;)
On v2/v3 - v2 will be the next stable release:
> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com
> [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Scott Baker
> Sent: Thursday, December 20, 2007 10:47 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] Separating logs by host?
> Rainer Gerhards wrote:
> > Looks like doc can need some more guides ;)
> > Does this help: http://www.rsyslog.com/Article60.phtml
> Excellent... doing this causes all messages to be logged in that
> format. Even local messages from the box (cron, mail, authpriv, etc)
> to go into that format.
> Can I apply that logging statement to a group of IPs? I have a bunch
> of DSL equipment that logs. It would be nice if I could break all my
> equipment out like:
> Routers: /var/log/routers-%$NOW%.log
> DSL: /var/log/dsl-%$NOW%.log
> Dial-up: /var/log/dial--%$NOW%.log
> Each/Any of those groups could have one or many sources. We have
> about 13 unique DSL devices that should all probably go in the same
> log for simplicity. It would be REALLY cool to be able to say
> something like:
> 192.168.1.1/24:*.* /var/log/dsl-%$NOW%.log
> 192.168.3.1/24,10.1.1.1/24:*.* /var/log/routers-%$NOW%.log
> Am I just dreaming or is that possible?
> Also why is the next version of rsyslog (after reading your blog)
> going to be version 3 and not 2.0?
> Scott Baker - Canby Telcom
> RHCE - System Administrator - 503.266.8253
> rsyslog mailing list
More information about the rsyslog