Debug mode is the keyword here ;) Add -d -n to the command line and run it interactively with stdout redirected to a file. Maybe I've made a mistake with the directives, maybe we have another issue. Debug output can get quite large, please do not send it to the list (I think mailman will bounce it anyhow). You can email me privately ([EMAIL PROTECTED]) if you like.
Just be warned: its 7p right now here and I can not promise to fix a larger problem before xmas ;) Rainer > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:rsyslog- > [EMAIL PROTECTED] On Behalf Of Scott Baker > Sent: Friday, December 21, 2007 6:56 PM > To: rsyslog-users > Subject: Re: [rsyslog] Separating logs by host? > > Rainer Gerhards wrote: > > I forgot the quotes around the template string ;) That should work > (not > > tested, though): > > > > $template dsl, "/var/log/cisco-dsl-%$NOW%.log" > > :FROMHOST, startswith, "10.3." -?dsl > > That was it... now rsyslog starts without errors. > > Howeever it's not logging to the file I have set to though, instead > it's going to /var/log/messages. I've verified with tcpdump that > it's sending from the correct IP address. I've tried both startswith > and isequal and neither seem to work. > > I don't know how to troubleshoot any further? Is there some debug > mode or something that will give me more information about why it's > not logging the way I think it should? > > -- > Scott Baker - Canby Telcom > RHCE - System Administrator - 503.266.8253 > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
