[rsyslog] rsyslog with apache and per vhost log

Maurizio Rottin maurizio.rottin at gmail.com
Thu Mar 20 15:46:32 CET 2008


2008/3/20, Rainer Gerhards <rgerhards at hq.adiscon.com>:
> Can you send me a handful of the logline to play with? Probably not this
>  week, but next...
>

 www.mysite.com 192.168.242.2 [20/Mar/2008:15:41:10 +0100] "GET
/images/wm001.jpg HTTP/1.1" 304 - "http://www.mysite.com/webmail.htm"
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.13) Gecko/20060607"

i'm trying to use the regexp but with no success in this way:
$template MsgFormat,"%msg%\n"
$template ApacheRemoteCustom,"/var/log/apachelog/%msg:R:^\
[a-z,\.]*--end%_az.log"
local6.info -?ApacheRemoteCustom;MsgFormat

from the documentation: "the property replacer will return the part of
the property text that matches the regular expression" which should be
" www.mysite.com"
but i get a file named _az.log

--
mr



More information about the rsyslog mailing list