[rsyslog-notify] Forum Thread: Re: Filter and copy some to other server? - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Fri Apr 25 18:32:34 CEST 2014
User: ksuuk
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24583#p24583
Message:
----------
[quote="dlang":312963we]remember that when you use include
files[/quote:312963we]
I don't have to use include files, but how to set this up? Where to add the
filter? Before template? Or I must do a new template for remote server?
Somthing like:
$template RemoteServer,"@syslog2.internal"
if $hostname contains 'list' and $msg contains 'extra' then ?RemoteServer
$template FILENAME,"/var/log/hosts/%HOSTNAME%/syslog.log"
*.* ?FILENAME
$template RemoteHost,"/var/log_arhiiv/syslog.log"
if ($hostname != 'syslog.internal') then ?RemoteHost
More information about the rsyslog-notify
mailing list