[rsyslog-notify] Forum Thread: Re: Log forwarding - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25323#p25323

Message: 
----------
the sending side is wrong

This makes no sense

action(type="omfwd" File="@@ip [fe80::3%icm0]/var/log/messages")

when forwarding, you specify the server, but you have no control over what
the server does with the log when it receives it, so having
/var/log/messages coupled with the up makes no sense

omfwd doesn't use the file= parameter, and you don't use @@ along with
action syntax

I'm not sure what you are trying to do with %icm0

you can do

@@1.1.1.1
@@fe80::1234

or you can do

action(type="omfwd" target="1.1.1.1" port="514" protocol="tcp")
action(type="omfwd" target="fe80::1234" port="514" protocol="tcp")