I think I can do something like this: %HOSTNAME:F,45:2%
To match my convention where the location is the suffix of the hostname seperated by a hyphen. Ie web1-nyc But how do you use this property replacer to construct a path name in a template..... On Fri, Nov 5, 2010 at 10:42 AM, Jonathan Sabo <[email protected]> wrote: > List, > > I want to organise my central syslog server based on physical site > location. I can obtain the physical site location by matching a > substring in the hostname message property. How do you do that in > ryslog templates? Given a known list of site names that are part of > the hostname for each system sending logs, what's the best way to > match that in the hostname and then place them in directories based on > that site name. > > /var/log/$sitename/$hostname/logs.log > > For example: > > web1-nyc > > Logs would placed in > > /var/log/nyc/web1-nyc/access.log > > I think I could say something like: > > $template NYCTemplate, /app/log/nyc/%HOSTNAME%/access.log > > if $hostname contains "nyc" then ?NYCTemplate > > But then I have to have each site name hard coded in the config... I > have a naming convention of typeNum-site so I would like it to be more > dynamic based on whatever follows the hyphen. Is there a way to > match this convention and then just create the directory based on the > string following the hyphen instead of having to hard code the names > in the config? > > Thanks, > > Jonathan > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
