[rsyslog-notify] Forum Thread: pmlastmsg clarification - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Wed Jan 20 16:51:32 CET 2016
User: ctr
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26288#p26288
Message:
----------
Quick question regarding the pmlastmsg module (speaking about rsyslog 5.8).
The example
[url=http://www.rsyslog.com/doc/pmlastmsg.html:n8x7cwb0]here[/url:n8x7cwb0]
is not so clear to me.
I'd like to drop those messages without any changes to the rest of the
messages, the used statements:
$RulesetParser rsyslog.lastline
$RulesetParser rsyslog.rfc5424
$RulesetParser rsyslog.rfc3164
do not sound familiar to me.
I mainly use a few own templates like
[code:n8x7cwb0]$template fixup, "something"[/code:n8x7cwb0]
and then use this template and in the end "*.*" to forward to another
proces using the builtin 23Format.
I understand that I need to specify "$ModLoad pmlastmsg" early, but what
has to be configured next to a "~" to match and effectively drop those
messages?
More information about the rsyslog-notify
mailing list