[rsyslog-notify] Forum Thread: Re: fwd local msg, two listeners to remote server w/TLS, Que - (Mode 'reply')

[noreply at adiscon.com]

User: atticus 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26622#p26622

Message: 
----------
Wow!  Thank you!  You have jumpstarted me a great deal here.  I was off
penning you a note and you answered a most of those questions.  Here are
just a few left:
Here’s Rainer’s example from
<!-- m --><a class="postlink"
href="http://www.rsyslog.com/doc/master/rainerscript/queue_parameters.html">http://www.rsyslog.com/doc/master/raine
... eters.html</a><!-- m -->


action(type="omfwd" target="192.168.2.11" port="10514" protocol="tcp"
       queue.filename="forwarding" queue.size="1000000"
queue.type="LinkedList"
      
So, I wrote this like Rainer’s example:

Ruleset (name=”FWD”) {
action(type="omfwd" target="192.168.2.11" port="10514" protocol="tcp"
       queue.filename="forwarding" queue.saveonshutdown =”on”
queue.type="LinkedList"}  I wrote it in the action.  This is correct from
your previous reply.
stop

input(type="imtcp" port="10514" ruleset="fwd");
 


SYNTAX

1)	 Is there an opening and closing curly bracket around the ruleset as in
the old syntax?
2)	Is the “STOP” required?

3)	If I want to use a single ruleset for UDP and TCP sources, per your note
I'd do this.

action(type="omfwd" target="192.168.2.11" port=" 514" protocol="udp"
input(type="imudp" port=514" ruleset="fwd")

Look correct?

Now, on to researching how to do an actin statement for the local system
message write then forward.

Again, thank you for your assistance.