[rsyslog-notify] Forum Thread: Re: syslog-server receives dupes using a template - (Mode 'edit_last_post')

noreply at adiscon.com noreply at adiscon.com
Wed Sep 17 18:11:27 CEST 2014


User: Habitual 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24936#p24936

Message: 
----------
Well, I made some changes to the RemoteHost Template I was using:
[code:24lc4qjz]$template RemoteHost,
"/kibana/%HOSTNAME%/%HOSTNAME%.log"
*.* -?RemoteHost[/code:24lc4qjz]
1 file per host is ok by me.

and added some basic Security:
[code:24lc4qjz]
### Security
$AllowedSender UDP, IP0, IP1[/code:24lc4qjz]

But I'm still getting dupes and triplicates :(
[code:24lc4qjz]Sep 17 09:05:41 web sshd[24250]:
pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 17 09:05:41 web sshd[24250]:
pam_unix(sshd:session): session opened for user root by (uid=0)
Sep 17 09:05:41 web sshd[24250]:
pam_unix(sshd:session): session opened for user root by
(uid=0)[/code:24lc4qjz]

Thanks.


More information about the rsyslog-notify mailing list