[rsyslog-notify] Forum Thread: Re: Help with logs. Filling up and taking up space - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25611#p25611

Message: 
----------
the answer to all your questions is yes you can do that

look at <!-- m --><a class="postlink"
href="http://www.rsyslog.com/doc/v8-stable/configuration/filters.html">http://www.rsyslog.com/doc/v8-stable/co
... lters.html</a><!-- m -->

for how to filter logs

you don't say what version of rsyslog you are running

to not have the messages written to files and only go to the database, you
would put the database action ahead of the write to file and then tell
rsyslog to throw away the message after it's written to the database (the
stop command)

look over the documentation page and ask more specific questions after
you've done so.