[rsyslog-notify] Forum Thread: Re: Central syslog and local storage - (Mode 'reply')

[noreply at adiscon.com]

User: uppsalanet 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26512#p26512

Message: 
----------
Note to my self, this works!

[code:3i5qbusr]Load Modules
module(load="imudp")
module(load="imtcp")
module(load="imuxsock")
module(load="imklog")

# rsyslog Templates
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$template TmplMsg, "/syslog/%$MONTH%%$DAY%/%HOSTNAME%/%PROGRAMNAME%.log

# rsyslog Input Modules
input(type="imudp" port="514" ruleset="Inbound")
input(type="imtcp" port="10514" ruleset="Inbound")

# Do the local logging
#kern.*                                                 /dev/console
## Log anything (except mail) of level info or higher.
## Don't log private authentication messages!
*.info;mail.none;authpriv.none;cron.none               
/var/log/messages
## The authpriv file has restricted access.
authpriv.*                                              /var/log/secure
## Log all the mail messages in one place.
mail.*                                                 
/var/log/maillog
## Log cron stuff
cron.*                                                  /var/log/cron
## Everybody gets emergency messages
*.emerg                                                
:omusrmsg:*
## Save news errors of level crit and higher in a special file.
uucp,news.crit                                         
/var/log/spooler
## Save boot messages also to boot.log
local7.*                                               
/var/log/boot.log

# rsyslog RuleSets
ruleset(name="Inbound") {
        action(type="omfile"
                DynaFile="TmplMsg"
                template="RSYSLOG_SyslogProtocol23Format")
}[/code:3i5qbusr]