[rsyslog-notify] Forum Thread: Central syslog and local storage - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Thu Apr 28 12:19:05 CEST 2016


User: uppsalanet 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26508#p26508

Message: 
----------
I've looked this forum trying to solve my problem without luck :-(

I would like to send localhost logfiles to "/var/log/" like
[i:31sr4ovn]standard[/i:31sr4ovn] and continue to send remote logging to
"/syslog" as is.

How to achieve that, can someone put me into right direction?

[code:31sr4ovn]# Load Modules
module(load="imudp")
module(load="imtcp")
module(load="imuxsock")

# rsyslog Templates
#$template TmplMsg, "/syslog/%HOSTNAME%/%$YEAR%/%PROGRAMNAME%.log
$template TmplMsg, "/syslog/%$MONTH%%$DAY%/%HOSTNAME%/%PROGRAMNAME%.log

# rsyslog Input Modules
input(type="imudp" port="514" ruleset="Inbound")
input(type="imtcp" port="10514" ruleset="Inbound")

# rsyslog RuleSets
ruleset(name="Inbound") {
        action(type="omfile"
                DynaFile="TmplMsg"
                template="RSYSLOG_SyslogProtocol23Format")

}
[/code:31sr4ovn]


More information about the rsyslog-notify mailing list