Ok so I'm working on logging my bash history. I've gotten it all setup and it
works its logging to a log file in var/log/bashhist.log
Its forwarding just fine, but the way I have it setup is this:
$template bashhist,"/var/log/hosts/%HOSTNAME%/bashhistory.log"
if \
$source != 'syslog.onlineschool.ca' \
and \
$syslogfacility-text == 'local4' \
then ?bashhist
My question is this....when using if then statements and I have program's that
come in and they are using the same local4 facility (or any other facility set
for that matter) How would I make it function like this....ok when this program
on this facility is received then it should go here.
My problem is not with defining a facility. Its with defining what a said
program name should be. I've been able to do it with httpd with no problems,
but miscilaneous applications and such I don't know how to define. Please help.
Joshua Bitto
Information Technologist
KCC
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
