[rsyslog] Duplicate log entries with Apache+rsyslog

Rainer Gerhards rgerhards at hq.adiscon.com
Thu Dec 10 16:36:01 CET 2009


David, 

small correction:

> I believe that you can shorten this to

local6.info -?ApacheRemoteCustom
& ~                                             # note the "&"!
*.info,mail.none,authpriv.none,cron.none ?DynMSG


> because rsyslog will continue to use the prior filter rules until it
> sees
> new ones (I know you can do this with more complex filters, I haven't
> done
> it with the simple syslog-style filters)

slightly different. "&" chains together actions. A rule consist of a filter
and actions. There is one filter, but there can be many actions. The "&"
tells that an action is to be added to the previous rule.

Rainer





More information about the rsyslog mailing list