On Mon, 21 May 2012, Mohacsi Janos wrote:
Dear Colleagues,
Is there a possible with rsyslog to rewrite the logging facility when a
sending to a remote syslog server?
Problem:
on host1 local1 and local2 facility is used to logging. Application is
sending logs via syslog via local1 facility. The logs from host1 with local1
facility should be send to host2 with local2 facility.
The local2 cannot be used by application on host1, since there is another
application with hard-coded local2 facility.
The local1 cannot be used on host2 since it is hard-coded - and using several
other systems.
Is it possible to mapping/rewriting facility during the syslog sending?
Template can be used for that purpose? Any recipe available for such rewrite?
There is no clean way to do this. you can do this with a template, but the
problem is that the facility and priority are combined into a single
number. As such, each priority you want to set will need a different
template.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
