> > On Jun 30, 2011, at 5:15 PM, Brian Knox wrote: > >> I do this using a forwarding rule that basically says "send everything to >> the other server that did not originate from the other server", using a >> !isequal - >> >> :fromhost-ip, !isequal, "[other host ip] " @@[other host ip] >> >
I've returned to pick at this problem a bit. The exact line I have in place is: :fromhost-ip, !isequal, "10.1.1.1" :omrelp:log1.example.com:2514 The problem I'm seeing is that I wind up with massive log storms between the two boxes-- a message shows up from a random host (webserver.example.com), shows up in log1's log, gets thrown to log2 and is logged, then winds up starting this cycle over again. Does fromhost / fromhost-ip break with relp? -- Corey / KB1JWQ _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
