>> Similarly, I created a cisco log and generated logging on the cisco. >> In >> this case, it does log to the file I created, but it duplicates it to >> messages as well. > > you need to discard the message if it shall not be written to a second > file. > See here: > > http://www.rsyslog.com/storing-messages-from-a-remote-system-into-a-specific-file/
Thanks for your response, Rainer. It looks like that addresses messages that are logged both remotely and locally, not ones that are logged remotely to both messages and the log I specified in the config. It also appears to require TCP. That may be the problem...cisco routers won't work using TCP to remote log to rsyslog (you can specify it, but it's broken), so I had to use UDP for it. I already have this: $ModLoad imudp.so $UDPServerRun 514 $AllowedSender UDP, 127.0.0.1, our.cisco.ip In the config. I tried using just TCP, but nothing works then. Is it possible that the localhost entry is causing the dup? _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
