[rsyslog-notify] Forum Thread: Re: v7.4.9 - Config Help/Complete Documentation - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24191#p24191

Message: 
----------
files in the log directory get created only when there is data to be
written to them, so until a log entry that matches your filters arrives,
the file will not be created

Debug mode is needed if you think that rsyslog is generating an error or
doing something subtly wrong, but if the problem is that the filters aren't
doing what you expect them to, write a log file with the format
RSYSLOG_DebugFormat and you can see exactly what is in each variable. This
will usually let you quickly identify what's wrong with your filters.

so, if you put the line

/var/log/debuglog;RSYSLOG_DebugFormat

above the include line, it will write everything to that file

There is no variable $fromip, there is $fromhost-ip

what are the contents of the included files?


do you have some sample logs that you think should match these rules?