[rsyslog] Separating logs by host?

Rainer Gerhards rgerhards at hq.adiscon.com
Thu Dec 20 22:50:11 CET 2007


I need to think about the real question a bit ;) Not an immediate
solution ... but not hopeless either ;)

On v2/v3 - v2 will be the next stable release:
http://rgerhards.blogspot.com/2007/12/begun-working-on-rsyslog-v3.html 

Rainer

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com 
> [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of Scott Baker
> Sent: Thursday, December 20, 2007 10:47 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] Separating logs by host?
> 
> Rainer Gerhards wrote:
> > Looks like doc can need some more guides ;)
> > 
> > Does this help: http://www.rsyslog.com/Article60.phtml
> 
> Excellent... doing this causes all messages to be logged in that
> format. Even local messages from the box (cron, mail, authpriv, etc)
> to go into that format.
> 
> Can I apply that logging statement to a group of IPs? I have a bunch
> of DSL equipment that logs. It would be nice if I could break all my
> equipment out like:
> 
> Routers: /var/log/routers-%$NOW%.log
> DSL: /var/log/dsl-%$NOW%.log
> Dial-up: /var/log/dial--%$NOW%.log
> 
> Each/Any of those groups could have one or many sources. We have
> about 13 unique DSL devices that should all probably go in the same
> log for simplicity. It would be REALLY cool to be able to say
> something like:
> 
> 192.168.1.1/24:*.*                    /var/log/dsl-%$NOW%.log
> 192.168.3.1/24,10.1.1.1/24:*.*        /var/log/routers-%$NOW%.log
> 
> Am I just dreaming or is that possible?
> 
> Also why is the next version of rsyslog (after reading your blog)
> going to be version 3 and not 2.0?
> 
> -- 
> Scott Baker - Canby Telcom
> RHCE - System Administrator - 503.266.8253
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> 



More information about the rsyslog mailing list