[rsyslog-notify] Forum Thread: Re: Forwarding select hosts to remote host for analysis - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26814#p26814

Message: 
----------
This is a good example of why the new syntax was created. the queue you
created only applies to the one arcsight rule

you don't show us enough of the config to begin to guess what is actually
happening with the logs. are there rulesets configured for example, do you
have stop actions in your rules? etc