> >>> Similarly, I created a cisco log and generated logging on the cisco. >>> In >>> this case, it does log to the file I created, but it duplicates it to >>> messages as well. >> >> you need to discard the message if it shall not be written to a second >> file. >> See here: >> >> http://www.rsyslog.com/storing-messages-from-a-remote-system-into-a-specific-file/ > > Thanks for your response, Rainer. It looks like that addresses messages > that are logged both remotely and locally, not ones that are logged > remotely to both messages and the log I specified in the config. It also > appears to require TCP. That may be the problem...cisco routers won't > work using TCP to remote log to rsyslog (you can specify it, but it's > broken), so I had to use UDP for it. I already have this: > > $ModLoad imudp.so > $UDPServerRun 514 > $AllowedSender UDP, 127.0.0.1, our.cisco.ip > > In the config. I tried using just TCP, but nothing works then. Is it > possible that the localhost entry is causing the dup?
Disregard all this...like I said, I'm noob to rsyslog. I had the default setting for messages: *.info;mail.none;authpriv.none;cron.none /var/log/messages I simply added ;local7.none above and that fixed it, of course. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
