Hello,

is there a way to filter incoming logs by a unique property of a TLS
certificate?

Something along the lines of:

----
Cleint certificate:
Subject: C=LT,O=smt,L=Vilnius,ST=Lietuva,CN=server1.servers.local

Central logging server config:
$InputTCPServerStreamDriverAuthMode x509/name
$InputTCPServerStreamDriverPermittedPeer server1.servers.local
$InputTCPServerStreamDriverMode 1

if tls_client_cn='server1.servers.local' then
/logs/server1.servers.local/logfile
----

?

I'm searching how to authenticate a client.

Thank you,
IgnasR
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards

Reply via email to