Rainer Gerhards wrote: > Looks like doc can need some more guides ;) > > Does this help: http://www.rsyslog.com/Article60.phtml
Excellent... doing this causes all messages to be logged in that format. Even local messages from the box (cron, mail, authpriv, etc) to go into that format. Can I apply that logging statement to a group of IPs? I have a bunch of DSL equipment that logs. It would be nice if I could break all my equipment out like: Routers: /var/log/routers-%$NOW%.log DSL: /var/log/dsl-%$NOW%.log Dial-up: /var/log/dial--%$NOW%.log Each/Any of those groups could have one or many sources. We have about 13 unique DSL devices that should all probably go in the same log for simplicity. It would be REALLY cool to be able to say something like: 192.168.1.1/24:*.* /var/log/dsl-%$NOW%.log 192.168.3.1/24,10.1.1.1/24:*.* /var/log/routers-%$NOW%.log Am I just dreaming or is that possible? Also why is the next version of rsyslog (after reading your blog) going to be version 3 and not 2.0? -- Scott Baker - Canby Telcom RHCE - System Administrator - 503.266.8253 _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog

