Here's a brute-force method that came to mind: if $programname == 'puppet-agent' and $syslogseverity == '0' then /var/log/puppet/agent-0.log if $programname == 'puppet-agent' and $syslogseverity == '1' then /var/log/puppet/agent-1.log if $programname == 'puppet-agent' and $syslogseverity == '2' then /var/log/puppet/agent-2.log if $programname == 'puppet-agent' and $syslogseverity == '3' then /var/log/puppet/agent-3.log if $programname == 'puppet-agent' and $syslogseverity == '4' then /var/log/puppet/agent-4.log if $programname == 'puppet-agent' and $syslogseverity == '5' then /var/log/puppet/agent-5.log if $programname == 'puppet-agent' and $syslogseverity == '6' then /var/log/puppet/agent-6.log if $programname == 'puppet-agent' and $syslogseverity == '7' then /var/log/puppet/agent-7.log
Do this a few times so that you will be certain . Hope this helps. “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) ----- Original Message ----- From: "Andreas Dvorak" <andreas.dvo...@gmail.com> To: puppet-users@googlegroups.com Sent: Tuesday, November 26, 2013 7:32:33 AM Subject: [Puppet Users] Puppet agent messages with rsyslog Dear all, I have Puppet 3.3.1 and rsyslog and RedHat 6. My problem is that I want to see the message "Finished catalog" only in the file /var/log/puppet/agent.log, but rsyslog sends it to the syslog server and than to netcool. It is also shown in /var/log/messages. I only want to see error message like Nov 26 13:20:36 vm7239 puppet-agent[19732]: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find class syslog::conf for vm7239.muc.baag on node vm7239.muc.baag Nov 26 13:20:36 vm7239 puppet-agent[19732]: Not using cache on failed catalog Nov 26 13:20:36 vm7239 puppet-agent[19732]: Could not retrieve catalog; skipping run I have created a rsyslog file in rsyslog.d/ if $programname == 'puppet-agent' and $syslogseverity <= '6' then /var/log/puppet/agent.log if $programname == 'puppet-agent' and $syslogseverity >= '6' then ~ I think the severity of "Finished catalog" should be low. Can somebody please help me? Best regards Andreas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/aefe6f79-e9bc-4bef-8bf6-68620cfdf657%40googlegroups.com . For more options, visit https://groups.google.com/groups/opt_out . -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/1253526686.4742518.1385470307339.JavaMail.root%40sz0126a.westchester.pa.mail.comcast.net. For more options, visit https://groups.google.com/groups/opt_out.
