[rsyslog-notify] Forum Thread: Re: Rsyslog logging using variables - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25938#p25938

Message: 
----------
rsyslog does not sync after each message by default, so all the work you do
to separate out some things to write with - is wasted (look at sync and
checkpiont settings in omfile if you want to have ti write more frequently)

for your news, I would do a tempalte that had syslogseverity-text in the
template and use it rather than multiple complex if statemetns.

personally I dislike having multiple things that write to one file. It may
be safe, but unless Rainer says it's safe, I don't trust tht you can't end
up with multiple threads writing to the same file simultaniously, so I put
the write action in a rulest and call it

i.e.
ruleset messages(){
  /var/log/messages
}

and replace everywhere you have /var/log/messages with call messages