[rsyslog-notify] Forum Thread: Re: Rsyslog Message duplicates - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Mon Mar 10 23:09:39 CET 2014


User: nooblinux 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24334#p24334

Message: 
----------
on the machine sending logs i added the values, 

*.* @@10.x.x.x:514
if $programname == 'apache-access' then ~
if $programname == 'apache-errors' then ~

and on the centralized log server i already have rules such as 

if $programname == 'apache-access' then /var/log/access.log
& ~
if $programname == 'apache-error' then /var/log/access.log
& ~

I have about 100 other servers logging this way and it seems to be working
fine, except that i was ( my original problem) getting duplicate messages
from apache error/access in the messages file. Still the apache access file
doesnt get to the centralized server.

skype= shyster217


More information about the rsyslog-notify mailing list