[rsyslog] syslog-ng filters and destinations under rsyslog

[Martin Mielke]

Sorry for the noise.

It seems that the post is pending on some reply ;-)


Cheers,


> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Rainer Gerhards
> Sent: 18 June 2009 15:11
> To: rsyslog-users
> Subject: Re: [rsyslog] syslog-ng filters and destinations under
rsyslog
> 
> FYI, there was also a forum post:
> 
>
http://kb.monitorware.com/syslog-filters-and-destinations-under-rsyslog-
> t9858
> .html
> 
> I'd appreciate if any other responses also go to the forum (so that
> others,
> when searching, find the complete info).
> 
> Rainer
> 
> > -----Original Message-----
> > From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> > bounces at lists.adiscon.com] On Behalf Of Martin Mielke
> > Sent: Thursday, June 18, 2009 2:18 PM
> > To: rsyslog-users
> > Subject: [rsyslog] syslog-ng filters and destinations under rsyslog
> >
> > Hi all,
> >
> > I need to find a way to either convert or import syslog-ng.conf
files
> > into rsyslog or learn the syntax to classify/store the logfiles
> > depending on the source.
> >
> > For example, taken from a syslog-ng file:
> > --
> > source s_network { udp(); tcp(); };
> >
> > filter f_systems {
> > host("1\.2\.3\.\d+");
> > };
> >
> > filter f_switches {
> > host("5\.6\.7\.8|5\.6\.7\.9");
> > };
> >
> > destination d_systems {file("/systems.log"); };
> > destination d_switches {file("/switches.log"); };
> >
> > log { source(s_network); filter(f_systems); destination(d_systems);
};
> > log { source(s_network); filter(f_switches);
destination(d_switches); };
> > --
> >
> > I have read the online documentation but I'm unable to find the
right
> > answer...
> >
> > Thanks!
> >
> > Martin
> >
> >
> > This email and any attachments are confidential, and may be legally
> privileged
> > and protected by copyright. If you are not the intended recipient
> > dissemination or copying of this email is prohibited. If you have
> received
> > this in error, please notify the sender by replying by email and
then
> delete
> > the email completely from your system.
> >
> > Any views or opinions are solely those of the sender.  This
> communication
> is
> > not intended to form a binding contract unless expressly indicated
to
> the
> > contrary and properly authorised. Any actions taken on the basis of
this
> email
> > are at the recipient's own risk.
> >
> >
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
> yslog
> http://www.rsyslog.com