[rsyslog-notify] Forum Thread: Re: filters not working - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Thu Apr 17 04:42:59 CEST 2014


User: nottoosmart 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24547#p24547

Message: 
----------
Sorry for the trouble.  I got this working finally.  My syntax was bad.
For those interested in the solution, this is what ended up working:
[code:17sufrwi]if $programname contains 'dhcpd' and ($hostname startswith
'bc0a80c' or $hostname startswith 'bac1957') then
/var/log/rsyslog/adonis_dhcpd.log
if $programname contains_i 'named' and ($hostname startswith 'bc0a80c' or
$hostname startswith 'bac1957') then /var/log/rsyslog/adonis_dns.log
if $programname contains_i 'sshd' and ($hostname startswith 'bc0a80c' or
$hostname startswith 'bac1957') then /var/log/rsyslog/adonis_sshd.log
if $hostname startswith 'bc0a80c' or $hostname startswith 'bac1957' then
/var/log/rsyslog/adonis.log[/code:17sufrwi]


More information about the rsyslog-notify mailing list