[rsyslog-notify] Forum Thread: Re: Cannot forward data received to another rsyslog server - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24805#p24805

Message: 
----------
A template is a formatting operation, not a matching operation

with the format you used, the far side would see

<programname>XYZ_

and nothing else (no timestamp, no hostname, _nothing_ else)

you need to use the if..then conditionals to make a test and only take the
action if the log matches what you want it to be

write a local log message using template RSYSLOG_DebugFormat and it will
show you all the variables that are defined that you can test

take a look at the rsyslog properties page for explanations of all the
different types of tests that you can do.