[rsyslog-notify] Forum Thread: Converting default rules to RainerScript - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Mon May 4 02:59:46 CEST 2015


User: kamermans 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25469#p25469

Message: 
----------
Hi, I'm using rsyslog 8.7.0 and I'm using RainerScript format for most of
my config file, but I would like to know how to express these remaining
config items in RainerScript:

[code:ghtpz6wb]
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$RepeatedMsgReduction off
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser syslog
$PrivDropToGroup syslog
$WorkDirectory /var/spool/rsyslog

$Ruleset RSYSLOG_DefaultRuleset
auth,authpriv.*                 /var/log/auth.log
*.*;auth,authpriv.none          -/var/log/syslog
kern.*                          -/var/log/kern.log
mail.*                          -/var/log/mail.log
*.emerg                                :omusrmsg:*
[/code:ghtpz6wb]

In particular, it seems like the
[b:ghtpz6wb]RSYSLOG_DefaultRuleset[/b:ghtpz6wb] should be defined using
[b:ghtpz6wb]ruleset()[/b:ghtpz6wb], but I don't think I should be
redefining the default ruleset, and if I don't redefine it, I'm not sure
how to do the priority filtering and file output action for each of these
files.


More information about the rsyslog-notify mailing list