[rsyslog-notify] Forum Thread: Re: Rsyslog Message duplicates - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Mon Mar 10 23:09:39 CET 2014
User: nooblinux
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24334#p24334
Message:
----------
on the machine sending logs i added the values,
*.* @@10.x.x.x:514
if $programname == 'apache-access' then ~
if $programname == 'apache-errors' then ~
and on the centralized log server i already have rules such as
if $programname == 'apache-access' then /var/log/access.log
& ~
if $programname == 'apache-error' then /var/log/access.log
& ~
I have about 100 other servers logging this way and it seems to be working
fine, except that i was ( my original problem) getting duplicate messages
from apache error/access in the messages file. Still the apache access file
doesnt get to the centralized server.
skype= shyster217
More information about the rsyslog-notify
mailing list