[rsyslog-notify] Forum Thread: Re: Matching many source IPs with 3 actions - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Fri Jun 10 22:30:39 CEST 2016
User: dlang
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26571#p26571
Message:
----------
The other thing to look at is the table lookup feature. It would let you
keep the lists of what IP addresses are what in an external file and be
able to update rsyslog by sending a special log message to rsyslog to tell
it to re-load the table.
It's designed for this sort of thing. If your IP addresses are in groups,
look at the sparse array feature, it was designed specifially for looking
up IP addresses and returning a value for anything in a range.
More information about the rsyslog-notify
mailing list