[rsyslog] using arbitrary facility id
Sayan Chowdhury
iamsayan at gmail.com
Mon Nov 30 17:20:16 CET 2009
Hello All,
Is it possible to use a facility id other than local0-local7?
I was using a facility id of 50 in some of the messages , and I had written
a selector line in my rsyslog file as well to log messages with facility id
of 50 into a seperate file.
However, I see that sometimes the messages are being written into all the
files(/var/log/messages, boot.log,/var/log/secure etc) instead of the one I
specified in the rsyslog.conf. If I restart rsyslog the problem goes away.
I am using rsyslog version 4.2.0.
Here is the selector line in my config
if $fromhost-ip == '127.0.0.1' and $syslogfacility == '50' and
$syslogseverity <= '6' then $log_rotation_50
where $log_rotation_50 is an outchannel which is configured to rotate the
file when it reaches the size of 2MB.
Regards,
Sayan
More information about the rsyslog
mailing list