[rsyslog] Reliability questions about rsyslog and capabilities.

Rainer Gerhards rgerhards at hq.adiscon.com
Thu Sep 16 10:35:22 CEST 2010


> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Sivan Greenberg
> Sent: Thursday, September 16, 2010 9:19 AM
> To: rsyslog-users
> Subject: Re: [rsyslog] Reliability questions about rsyslog and
> capabilities.
> 
> On Wed, Sep 15, 2010 at 7:53 PM,  <david at lang.hm> wrote:
> >> And last, but not least :) Can I send rsyslog'd debugging or
> >> error/warning logs to somewhere different like /tmp/rsyslog.log for
> >> easy troubleshooting of /var/log becomes inaccessible for any
> reason.
> >
> > you can configure rsyslog to write messages whereever you want to
> (system
> > permissions permitting)
> 
> Okay, but how do I separate rsyslog's *own* messages alone to a
> different place ? using property filters ?

They are just regular filters. I think (almost?) all are syslog.info
(syslog.* to be sure). So you can process them like any other message, e.g.

syslog.* /var/log/rsyslogd
syslog.* @@host.example.net

Rainer



More information about the rsyslog mailing list