On Fri, 22 Mar 2013, Paul Fontenot wrote:
Can rsyslog rotate a log based on some entry in that log?
Meaning if I have an application sending logs to an rsyslog server and an
entry in that logfile is "system shutdown is complete." can rsyslog roll
the log file based on that?
rsyslog cannot do this directly, but this seems like a perfect use for simple
event correlator http://simple-evcorr.sourceforge.net/ just watch for the
specific log entry and rotate the logfile
you could do it without SEC by having rsyslog filter for the appropriate
logfile, then feed that logfile to a program output (which would watch for the
appropriate input on stdin and rotate the logfile). This is essentially writing
a one-function version of SEC
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
