[rsyslog] filter logger tags from syslog

Jose Sanchez josesan311 at yahoo.com
Fri Nov 27 01:26:24 CET 2009


Hello,

Will this work if Im using rsyslog just at the server side? (client is using syslog)

Many thanks.

--- On Thu, 11/26/09, Rainer Gerhards <rgerhards at hq.adiscon.com> wrote:

> From: Rainer Gerhards <rgerhards at hq.adiscon.com>
> Subject: Re: [rsyslog] filter logger tags from syslog
> To: "rsyslog-users" <rsyslog at lists.adiscon.com>
> Date: Thursday, November 26, 2009, 2:11 AM
> I don't have the specifics at hand,
> but you can surely do that. I would even
> assume that if you just write the %msg% property to file,
> the infomation
> should look good. If not, you need to fiddle a bit with the
> property
> replacer.
> 
> The basic idea is to use
> 
> $template line,"%msg%\n"
> *.* /path/to/log;line
> 
> HTH
> Rainer 
> 
> > -----Original Message-----
> > From: rsyslog-bounces at lists.adiscon.com
> 
> > [mailto:rsyslog-bounces at lists.adiscon.com]
> On Behalf Of Jose Sanchez
> > Sent: Thursday, November 26, 2009 5:23 AM
> > To: rsyslog at lists.adiscon.com
> > Subject: [rsyslog] filter logger tags from syslog
> > 
> > Hello,
> > 
> > I've been using classic syslog for centralizing apache
> access 
> > logs from one server to a remote syslog server, the
> thing is 
> > syslog adds some nasty tags before the lines in the
> access 
> > logs and I cant get them off, ie:
> > 
> > "Nov 25 21:25:37 server1 logger:"
> > 
> > I would like to know if rsyslog has the option to
> filter this 
> > kind of stuff, I just want to have the logs sent to
> the 
> > syslog server exactly like I was saving them in a
> local 
> > access.log file.
> > 
> > Thanks in advance.
> > 
> > 
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com
> > 
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
> 



More information about the rsyslog mailing list