On Thu, Mar 14, 2013 at 17:47:04 -0700, Chad Gowin wrote:
> Hey rsyslog-users,
>
> Using rsyslog 5.8.10, I'm using the imfile module to monitor my apache logs
> and send them to a remote server:
>
> $InputFileName /var/log/httpd/www.vhost.com-access.log
> $InputFileTag httpd
> $InputFileStateFile www.vhost.com-access.state
> $InputFileSeverity notice
> $InputFileFacility local2
> $InputRunFileMonitor
> $InputFilePersistStateInterval 1000
[...]
> On the remote server:
]...]
> kern.*;*.info;*.emerg;cron.none -?syslog;RSYSLOG_FileFormat
>
> My httpd logs are reaching their proper destination, but they're also going
> into the syslog file. I find this strange, since what I've defined for
> syslog doesn't match my httpd messages. I've tried using discards to get
Note that "notice" is higher priority than "info", so the "*.info" in
your syslog-file selector does actually match the local2.notice messages
generated from the httpd logs....
Nathan
----------------------------------------------------------------------------
Nathan Stratton Treadway - [email protected] - Mid-Atlantic region
Ray Ontko & Co. - Software consulting services - http://www.ontko.com/
GPG Key: http://www.ontko.com/~nathanst/gpg_key.txt ID: 1023D/ECFB6239
Key fingerprint = 6AD8 485E 20B9 5C71 231C 0C32 15F3 ADCD ECFB 6239
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
