[rsyslog-notify] Forum Thread: Re: omprog config/usage? - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24466#p24466

Message: 
----------
the if..then syntax should work in v5

check to see if you get any errors at startup (start with -dn) that would
indicate that there are syntax errors.

the *.info line would send all the logs, but the two tests should not

I would suggest that before you worry about omprog, write to a file, and if
it's not containing what you are expecting, write using
RSYSLOG_DebugFormat, which is a multi-line output format that shows you the
raw log message, and the broken out variables. That usually makes it easy
to spot what' wrong with a filter.

David Lang