[rsyslog-notify] Forum Thread: Re: Use of $InputFileTag for sorting. - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Sat Oct 25 03:42:05 CEST 2014
User: dlang
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25045#p25045
Message:
----------
If you don't want to filter, then just select logs via *.* and everything
will show up in the resulting
log
If you are getting some logs through, but not everything you expect, then
the thing to do is to create
some temporary log files where you use the format RSYSLOG_DebugFormat so
that you can see exactly what
is in the different variables and adjust your filters appropriately
something like
*.* /var/log/templogs;RSYSLOG_DebugFormat
InputFileTag is limited in how long it can be, and it shows up in the
syslogtag or programname variables (it should be obvious when you see the
debug output)
David Lang
More information about the rsyslog-notify
mailing list