[rsyslog-notify] Forum Thread: Re: Matching many source IPs with 3 actions - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Fri Jun 10 22:30:39 CEST 2016


User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26571#p26571

Message: 
----------
The other thing to look at is the table lookup feature. It would let you
keep the lists of what IP addresses are what in an external file and be
able to update rsyslog by sending a special log message to rsyslog to tell
it to re-load the table.

It's designed for this sort of thing. If your IP addresses are in groups,
look at the sparse array feature, it was designed specifially for looking
up IP addresses and returning a value for anything in a range.


More information about the rsyslog-notify mailing list