[rsyslog] syslog-ng filters and destinations under rsyslog

[Rainer Gerhards]

FYI, there was also a forum post:

http://kb.monitorware.com/syslog-filters-and-destinations-under-rsyslog-t9858
.html

I'd appreciate if any other responses also go to the forum (so that others,
when searching, find the complete info).

Rainer

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Martin Mielke
> Sent: Thursday, June 18, 2009 2:18 PM
> To: rsyslog-users
> Subject: [rsyslog] syslog-ng filters and destinations under rsyslog
> 
> Hi all,
> 
> I need to find a way to either convert or import syslog-ng.conf files
> into rsyslog or learn the syntax to classify/store the logfiles
> depending on the source.
> 
> For example, taken from a syslog-ng file:
> --
> source s_network { udp(); tcp(); };
> 
> filter f_systems {
> host("1\.2\.3\.\d+");
> };
> 
> filter f_switches {
> host("5\.6\.7\.8|5\.6\.7\.9");
> };
> 
> destination d_systems {file("/systems.log"); };
> destination d_switches {file("/switches.log"); };
> 
> log { source(s_network); filter(f_systems); destination(d_systems); };
> log { source(s_network); filter(f_switches); destination(d_switches); };
> --
> 
> I have read the online documentation but I'm unable to find the right
> answer...
> 
> Thanks!
> 
> Martin
> 
> 
> This email and any attachments are confidential, and may be legally
privileged
> and protected by copyright. If you are not the intended recipient
> dissemination or copying of this email is prohibited. If you have received
> this in error, please notify the sender by replying by email and then
delete
> the email completely from your system.
> 
> Any views or opinions are solely those of the sender.  This communication
is
> not intended to form a binding contract unless expressly indicated to the
> contrary and properly authorised. Any actions taken on the basis of this
email
> are at the recipient's own risk.
> 
> 
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com