From what I have seen, it looks like a bug in that version (but I did not try overly hard). Might just be a parsing issue, in which case the following could work:
if $rawmsg contains 'mysql' then -/var/log/mysql/mysql.log #y luego lo tiras & ~ HTH Rainer On Fri, 2013-04-05 at 12:58 +0200, Ana Gallardo Gómez wrote: > Hello again, > > my master file /etc/rsyslog.conf: > > > My configuration is: > > > > > > # cat /etc/rsyslog.conf > > > > > > $ModLoad imuxsock # provides support for local system logging > > > $ModLoad imklog # provides kernel logging support (previously done by > > > rklogd) > > > > > > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat > > > > > > $FileOwner root > > > $FileGroup adm > > > $FileCreateMode 0640 > > > $DirCreateMode 0755 > > > $Umask 0022 > > > > > > $IncludeConfig /etc/rsyslog.d/*.conf > > > > > > auth,authpriv.* /var/log/auth.log > > > *.*;auth,authpriv.none -/var/log/syslog > > > > > > daemon.* -/var/log/daemon.log > > > kern.* -/var/log/kern.log > > > lpr.* -/var/log/lpr.log > > > mail.* -/var/log/mail.log > > > user.* -/var/log/user.log > > > > > > mail.info -/var/log/mail.info > > > mail.warn -/var/log/mail.warn > > > mail.err /var/log/mail.err > > > > > > news.crit /var/log/news/news.crit > > > news.err /var/log/news/news.err > > > news.notice -/var/log/news/news.notice > > > > > > *.=debug;\ > > > auth,authpriv.none;\ > > > news.none;mail.none -/var/log/debug > > > *.=info;*.=notice;*.=warn;\ > > > auth,authpriv.none;\ > > > cron,daemon.none;\ > > > mail,news.none -/var/log/messages > > > > > > *.emerg * > > > > > > daemon.*;mail.*;\ > > > news.err;\ > > > *.=debug;*.=info;\ > > > *.=notice;*.=warn |/dev/xconsole > > > > I only have one included config file: > > # ls -la /etc/rsyslog.d/ > total 12 > drwxr-xr-x 2 root root 4096 abr 5 09:38 . > drwxr-xr-x 76 root root 4096 abr 5 12:22 .. > -rw-r--r-- 1 root root 196 abr 5 11:58 mysql.conf > > # cat /etc/rsyslog.d/mysql.conf > #Cuando el nombre del programa que genera el log contenga "mysql" lo envías > al fichero... > if $programname == 'msqld' or $msg contains 'mysql' then > -/var/log/mysql/mysql.log > #y luego lo tiras > & ~ > > That is all my configuration. > > Thanks again. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
