[rsyslog-notify] Forum Thread: Central syslog and local storage - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Thu Apr 28 12:19:05 CEST 2016
User: uppsalanet
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26508#p26508
Message:
----------
I've looked this forum trying to solve my problem without luck :-(
I would like to send localhost logfiles to "/var/log/" like
[i:31sr4ovn]standard[/i:31sr4ovn] and continue to send remote logging to
"/syslog" as is.
How to achieve that, can someone put me into right direction?
[code:31sr4ovn]# Load Modules
module(load="imudp")
module(load="imtcp")
module(load="imuxsock")
# rsyslog Templates
#$template TmplMsg, "/syslog/%HOSTNAME%/%$YEAR%/%PROGRAMNAME%.log
$template TmplMsg, "/syslog/%$MONTH%%$DAY%/%HOSTNAME%/%PROGRAMNAME%.log
# rsyslog Input Modules
input(type="imudp" port="514" ruleset="Inbound")
input(type="imtcp" port="10514" ruleset="Inbound")
# rsyslog RuleSets
ruleset(name="Inbound") {
action(type="omfile"
DynaFile="TmplMsg"
template="RSYSLOG_SyslogProtocol23Format")
}
[/code:31sr4ovn]
More information about the rsyslog-notify
mailing list