Hi All, I have several program that i am using to send data to local6 i am using rsyslog to filter these to their own logs however, some data seems to be written to multiple logs. Do you have any ideas?
if $programname == 'USERLOG' then /var/log/user.log &~ if $programname == 'FILERR' then /var/log/filerr.log $ModLoad ommail $ActionMailSMTPServer localhost $ActionMailFrom [email protected] $ActionMailTo [email protected] $template filerrSubject,"FILE ERROR %HOSTNAME%.example.com %timestamp%" $template filerrBody,"There is a file Error on Host: %HOSTNAME%.example.com\n%msg%" $template smsBody,"%programname%, 44711111111, %hostname% %rawmsg%\n" $ActionMailSubject filerrSubject $ActionExecOnlyOnceEveryInterval 50 if $programname == 'FILERR' then :ommail:;filerrBody $ModLoad omprog $actionomprogbinary /usr/bin/alert if $programname == 'FILERR' then :omprog:;smsBody if $programname =='FILERR' &~ Now data from program USERLOG correctly only goes into user.log Data from FILERR however, seems to go into filerr.log and also into my later defined local6.log. Any ideas why? Also $ActionExecOnlyOnceEveryInterval 50 seems to effect everything after that statement for that facility, Can i restrict it to only taking effect for this programname? Or just this one line below - then i could have different times for sms to email? Thanks Mark _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
