[rsyslog] Duplicate log entries with Apache+rsyslog
Rainer Gerhards
rgerhards at hq.adiscon.com
Thu Dec 10 16:36:01 CET 2009
David,
small correction:
> I believe that you can shorten this to
local6.info -?ApacheRemoteCustom
& ~ # note the "&"!
*.info,mail.none,authpriv.none,cron.none ?DynMSG
> because rsyslog will continue to use the prior filter rules until it
> sees
> new ones (I know you can do this with more complex filters, I haven't
> done
> it with the simple syslog-style filters)
slightly different. "&" chains together actions. A rule consist of a filter
and actions. There is one filter, but there can be many actions. The "&"
tells that an action is to be added to the previous rule.
Rainer
More information about the rsyslog
mailing list