[rsyslog-notify] Forum Thread: Prevent rsyslog server from indexing its own logs - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Thu Nov 19 19:59:45 CET 2015


User: wegdave 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26176#p26176

Message: 
----------
Hello. 

I haven't found any info about this anywhere online, not even here. (Maybe
there is, but I couldn't find).

I need a rsyslog server to index to a specific directory syslogs from 250
collectors from a warehouse, these logs will be forwarded/indexed by splunk
in order to be shown on a dashboard (later).

I managed to have rsyslog index these collectors logs, but the rsyslog
server is logging its own syslog messages. How do I blacklist it or prevent
it from doing that?

PS: I'm new to rsyslog.


More information about the rsyslog-notify mailing list