[rsyslog-notify] Forum Thread: Re: Rsyslog Message duplicates - (Mode 'reply')

[noreply at adiscon.com]

User: nooblinux 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24330#p24330

Message: 
----------
ok implemented filtering rules, but on the centralized rsyslog server now i
dont receive the access log but the error & messages file logs show up
fine.

$ModLoad imuxsock # provides support for local system logging (e.g. via
logger command)
$ModLoad imklog   # provides kernel logging support (previously done by
rklogd)
#$ModLoad immark  # provides --MARK-- message capability

# Provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514

# Provides TCP forwarding. The IP is the server's IP address


#Apache Access File:

$ModLoad imfile
$InputFileName /var/log/httpd/dev-access.log
$InputFileTag apache-access:
$InputFileStateFile stat-apache-access
#$InputFileFacility local6
$InputFileSeverity info
$InputRunFileMonitor

#Apache Error File:
$ModLoad imfile
$InputFileName /var/log/httpd/dev-error.log
$InputFileTag apache-errors:
$InputFileStateFile stat-apache-error
#$InputFileFacility local6
$InputFileSeverity error
$InputRunFileMonitor

$InputFilePollInterval 10

if $programname == 'apache-access' then @@10.x.x.x:514
& ~
if $programname == 'apache-errors' then @@10.x.x.x:514
& ~