[rsyslog] using arbitrary facility id

Sayan Chowdhury iamsayan at gmail.com
Mon Nov 30 17:20:16 CET 2009


Hello All,
Is it possible to use a facility id other than local0-local7?
I was using a facility id of 50 in some of the messages , and I had written
a selector line in my rsyslog file as well to log messages with facility id
of 50 into a seperate file.
However, I see that sometimes the messages are being written into all the
files(/var/log/messages, boot.log,/var/log/secure etc) instead of the one I
specified in the rsyslog.conf. If I restart rsyslog the problem goes away.
I am using rsyslog version 4.2.0.

Here is the selector line in my config


if $fromhost-ip == '127.0.0.1' and $syslogfacility == '50' and
$syslogseverity <= '6' then $log_rotation_50

where $log_rotation_50 is an outchannel which is configured to rotate the
file when it reaches the size of 2MB.
Regards,
Sayan



More information about the rsyslog mailing list