[rsyslog-notify] Forum Thread: Re: Use of $InputFileTag for sorting. - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Sat Oct 25 03:42:05 CEST 2014


User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25045#p25045

Message: 
----------
If you don't want to filter, then just select logs via *.* and everything
will show up in the resulting
log

If you are getting some logs through, but not everything you expect, then
the thing to do is to create
some temporary log files where you use the format RSYSLOG_DebugFormat so
that you can see exactly what
is in the different variables and adjust your filters appropriately

something like

*.* /var/log/templogs;RSYSLOG_DebugFormat

InputFileTag is limited in how long it can be, and it shows up in the
syslogtag or programname variables (it should be obvious when you see the
debug output)

David Lang


More information about the rsyslog-notify mailing list