[rsyslog-notify] Forum Thread: pmlastmsg clarification - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Wed Jan 20 16:51:32 CET 2016


User: ctr 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26288#p26288

Message: 
----------
Quick question regarding the pmlastmsg module (speaking about rsyslog 5.8).
The example
[url=http://www.rsyslog.com/doc/pmlastmsg.html:n8x7cwb0]here[/url:n8x7cwb0]
is not so clear to me.

I'd like to drop those messages without any changes to the rest of the
messages, the used statements:
$RulesetParser rsyslog.lastline
$RulesetParser rsyslog.rfc5424 
$RulesetParser rsyslog.rfc3164
do not sound familiar to me.

I mainly use a few own templates like
[code:n8x7cwb0]$template fixup, "something"[/code:n8x7cwb0]

and then use this template and in the end "*.*" to forward to another
proces using the builtin 23Format.

I understand that I need to specify "$ModLoad pmlastmsg" early, but what
has to be configured next to a "~" to match and effectively drop those
messages?


More information about the rsyslog-notify mailing list