[rsyslog-notify] Forum Thread: Re: filters not working - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Thu Apr 17 04:42:59 CEST 2014
User: nottoosmart
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24547#p24547
Message:
----------
Sorry for the trouble. I got this working finally. My syntax was bad.
For those interested in the solution, this is what ended up working:
[code:17sufrwi]if $programname contains 'dhcpd' and ($hostname startswith
'bc0a80c' or $hostname startswith 'bac1957') then
/var/log/rsyslog/adonis_dhcpd.log
if $programname contains_i 'named' and ($hostname startswith 'bc0a80c' or
$hostname startswith 'bac1957') then /var/log/rsyslog/adonis_dns.log
if $programname contains_i 'sshd' and ($hostname startswith 'bc0a80c' or
$hostname startswith 'bac1957') then /var/log/rsyslog/adonis_sshd.log
if $hostname startswith 'bc0a80c' or $hostname startswith 'bac1957' then
/var/log/rsyslog/adonis.log[/code:17sufrwi]
More information about the rsyslog-notify
mailing list