On Tue, Feb 23, 2010 at 8:11 AM, Harry Putnam <[email protected]> wrote: > What I'd like to do is have rsyslog create a directory for incoming > foreign logs for each host that sends syslog info. [...] > I suspect I should be able to figure it out from the pages here (line > wrapped for mail): > http://wiki.rsyslog.com/index.php \ > /Sysklogd_drop-in_with_remote_logs_separated_by_dynamic_directory > > $template DYNmessages,"/var/log/%HOSTNAME%/messages" > > But I'd want the directory named for the host and include all logs from > that host, not just the `messages' log.
You want to get familiar with templates and actions - there are two pieces to this. Rather than tell you exactly how to solve your problem you should read this: http://www.rsyslog.com/doc-rsyslog_conf_templates.html and this: http://www.rsyslog.com/doc-rsyslog_conf_actions.html And bookmark this: http://www.rsyslog.com/doc-property_replacer.html You are correct, the documentation isn't perfect. That said, the application works pretty good and solves a lot of problems that aren't otherwise easily solved, so people like to use it. I would prefer the developers put their few precious resources into making the application solid vs. creating explicit documentation. You can always come here for help. But for that reason I recommend you read the above thoroughly and also the other sections of the configuration documentation. You'll spend some time putting together a configuration that works for you but once you understand how the configs work I think you'll find it relatively easy to figure out how to do specific things. If you think you understand how the selectors, actions and templates work together and still have problems or questions, let us know. Aaron _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
