Thanks for the reply Rainer.

I have searched and searched for this (so perhaps it is a RTFM but I'm
struggling to find what part).

The nearest thing I could find was this:
    :msg, startswith, "my_app:" @@logs.loggly.com:[port]',

Does this look correct?

On 24 January 2012 17:50, Rainer Gerhards <[email protected]> wrote:

> You could check for the tag you have configured; make sure that it is
> sufficiently unique.
>
> rainer
>
> > -----Original Message-----
> > From: [email protected] [mailto:rsyslog-
> > [email protected]] On Behalf Of Peter Gillard-Moss
> > Sent: Tuesday, January 24, 2012 6:41 PM
> > To: [email protected]
> > Subject: [rsyslog] Conditional forwarding on imfiles
> >
> > Hello,
> >
> > I am using loggly to forward messages to.  I need to send logs from a
> > custom application which uses a bespoke logging format to a different
> > location.
> >
> > I have an imfile config which looks like this:
> >
> > $ModLoad imfile
> > $InputFileName /opt/myapp/log/my_app.log
> > $InputFileTag myapp:
> > $InputFileStateFile stat-myapp
> > $InputFileSeverity info
> > $InputRunFileMonitor
> >
> > $InputFilePollInterval 10
> >
> > *.* @@logs.loggly.com:[port]
> >
> > I only want to forward entries from my_app.  How would I go about doing
> > this?
> >
> > Thanks in advance.
> > Peter
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/

Reply via email to