On Mon, 28 Feb 2011, Lee Eric wrote:
Hi,
I have a question about separate logs order configuration. I have 4
machines with hostnames server, storage, client1 and client2. The
rsyslogs is running at server. The configuration looks like that:
$ModLoad imuxsock.so # provides support for local system logging (e.g.
via logger command)
$ModLoad imklog.so # provides kernel logging support (previously done by
rklogd)
$ModLoad imtcp.so
$InputTCPServerRun 514
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$template DynFile,"/var/log/system-%HOSTNAME%.log"
:source , !isequal , "localhost" ?DynFile
& ~
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* -/var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log
And in other machines the configuration looks like this:
$ModLoad imuxsock.so # provides support for local system logging (e.g.
via logger command)
$ModLoad imklog.so # provides kernel logging support (previously done by
rklogd)
$ModLoad imtcp.so
$InputTCPServerRun 514
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
*.* @@server.herdingcat.internal
*.info;mail.none;authpriv.none;cron.none /var/log/messages
authpriv.* /var/log/secure
mail.* -/var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.* /var/log/boot.log
/var/log/system-storage.log, /var/log/system-client1.log,
/var/log/system-client2.log created successfully and it works well but
there's also a log file /var/log/system-server.log created. I hope
server's log is still recorded under /var/log/messages not separated.
So I'm wondering is there any good method to achieve that function?
I don't really understand your question here.
the second configuration doesn't seem to have any dynafile lines, so it
sounds like you are asking about the first one.
In the first one you are saying that for any server other than localhost,
put the logs in a file /var/log/system-name.log and then throw them away
(don't put them in any other logfile)
so if you get a log entry from a machine called 'server' it would create
the fiel /var/log/system-server.log and then throw away the log.
could you please try restating your what you think is being done
differently from what you are wanting?
David Lang4
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
