[rsyslog-notify] Forum Thread: Filter: Only log local for specific action - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Mon Nov 9 16:57:35 CET 2015
User: AirOnSkin
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26118#p26118
Message:
----------
Heya,
I have the following configuration among others:
[code:14r9rc4e]
# TEMPLATES
template(name="AlertsFileFormat" type="string"
string="%syslogfacility-text%.%syslogseverity-text%:
%timegenerated% %hostname%
%syslogtag:1:32%%msg:::sp-if-no-1st-sp%%msg%\n"
)
# RULES
*.warn;*.err;*.crit;*.alert;*.emerg;auth,authpriv.none
action(type="omfile" template="AlertsFileFormat" fileCreateMode="0440"
file="/var/log/alerts")
[/code:14r9rc4e]
I would like to define, that this action only applies to local logs (but
other actions shouldn't be affected). I've read through the docs, but I
can't put it together myself :/
Any ideas?
Cheers,
Stefan
More information about the rsyslog-notify
mailing list