On Tue, 20 Apr 2010, Tom Brown wrote: >> what is your current configuration? >> >> it sounds like you need to change the format string to include the >> hostname. >> >> > thanks for the response - i did not setup this system so am not hugely > familiar with it however would i need to be looking at the Log processing > templates or the Output filename templates or neither?
it would be the log processing template > Currently we have something like > > > # Log processing templates > $template fmtStripLeadingSpace,"%msg:R,ERE,1,DFLT: (.*)--end%\n" try changing this to $template fmtStripLeadingSpace,"%hostname% %msg:R,ERE,1,DFLT: (.*)--end%\n" David Lang > > # Output filename templates > > $template > SystemLogFile,"/logs/syslog/%hostname%/%timereported:1:4:date-mysql%/%timereported:1:6:date-mysql%/%timereported:1:8:date-mysq > l%/%timereported:1:8:date-mysql%-%hostname%-%syslogfacility-text%.log" _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
