Le 03/08/2011 14:37, claus westerkamp a écrit :
You should place the DynaFile rules before the local rules (/etc/Rsyslog.D/somefile.conf is a good place) followed by some rule to stop processing messages that comes from remote host.Hello list,I followed this guide http://www.rsyslog.com/article60/ to get seperate logs for different hosts (remote-logging of ESX-servers).my /etc/rsyslog.d/networks.conf looks $template DynaFile,"/var/log/rsys/system-%HOSTNAME%.log" *.* -?DynaFile The logs from 5hosts appear in /var/log/syslog AND in /var/log/rsys/system-%HOSTNAME%.log
e.g: /:fromhost-ip, !isequal, "127.0.0.1" ~/
/etc/rsyslog.conf looks http://pastebin.com/zUExraFW What am I missing? My goal is to not have the remote-servers in /var/log/syslog but in seperate files. kind regards claus _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
-- <http://www.horoa.net>
<<attachment: a_chapellon.vcf>>
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

