[rsyslog-notify] Forum Thread: Filter: Only log local for specific action - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Mon Nov 9 16:57:35 CET 2015


User: AirOnSkin 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26118#p26118

Message: 
----------
Heya,

I have the following configuration among others:
[code:14r9rc4e]
# TEMPLATES
template(name="AlertsFileFormat" type="string"
  string="%syslogfacility-text%.%syslogseverity-text%:
%timegenerated% %hostname%
%syslogtag:1:32%%msg:::sp-if-no-1st-sp%%msg%\n"
)

# RULES

*.warn;*.err;*.crit;*.alert;*.emerg;auth,authpriv.none
action(type="omfile" template="AlertsFileFormat" fileCreateMode="0440"
file="/var/log/alerts")
[/code:14r9rc4e]
I would like to define, that this action only applies to local logs (but
other actions shouldn't be affected). I've read through the docs, but I
can't put it together myself :/

Any ideas?

Cheers,
Stefan


More information about the rsyslog-notify mailing list