Hi, I am trying to use the rulesets to log remote logs into a separate file (rsyslog 4.6.2). The conf looks like this: ================================ $ModLoad imtcp # Provides TCP syslog reception $ModLoad imudp.so # Provides UDP syslog reception $ModLoad imuxsock.so # provides support for local system logging (e.g. via logger command) $ModLoad imklog.so # provides kernel logging support (previously done by rklogd)
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat $template RMH,"/var/log/rsyslog/%HOSTNAME%/rsyslog.log" *.info;mail.none;authpriv.none;cron.none /var/log/messages authpriv.* /var/log/secure mail.* -/var/log/maillog cron.* /var/log/cron *.emerg * uucp,news.crit /var/log/spooler local7.* /var/log/boot.log $RuleSet Remote *.* ?RMH $InputUDPServerBindRuleset Remote $UDPServerRun 514 ================================ I am sending everything from the client to this server @ port 514. The server receives the messages in /var/log/messages instead of the defined template RMH. If I remove $Ruleset Remote, all messages go into RMH temlate destination. I am following this: http://www.rsyslog.com/doc/multi_ruleset.html. Am I missing something? Thanks. Usman _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/
