[rsyslog-notify] Forum Thread: Re: Update to new config format - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26852#p26852

Message: 
----------
one thing I would do differently is instead of:

[code:310jro6i]# destination
local7.* @logs.thedestination.com:5514;TheTemplateName

# stop processing the log event
& stop
[/code:310jro6i]
I would do:
[code:310jro6i]
local7.* {
    @logs.thedestination.com:5514;TheTemplateName
    stop
}
[/code:310jro6i]

also, for a template as trivial as you are using, I would just use the old
format.

note that you could replace    
@logs.thedestination.com:5514;TheTemplateName with action(type="omfwd"
protocol="udp" template="TheTemplateName" port="5514") which has the
advantage that you can add name="something" so that it will show up as
"something" rather than "Action 1" in pstats data. But if you aren't doing
anything fancy, the old style like you are using works and is easier to
read.