Rainer Gerhards wrote: > I need to think about the real question a bit ;) Not an immediate > solution ... but not hopeless either ;) > > On v2/v3 - v2 will be the next stable release: > http://rgerhards.blogspot.com/2007/12/begun-working-on-rsyslog-v3.html
Another good example is that we have several linux mail servers. I like to aggregate all of their logging to one rsyslog server. They all log to mail.* on their local machines, and then forward also to my rsyslog server. The problem is that shows up in my mail.* on the syslog server, and thus gets mixed in with the local mail.* from the syslog server itself. It would be nice to be able to separate those, by IP would be the easiest. mail.* /var/log/maillog 1.2.3.4/32:mail.* /var/log/mail-server.log Or something like that... -- Scott Baker - Canby Telcom RHCE - System Administrator - 503.266.8253 _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
