I have a working template that I use to create my dynamic files and it is working great and very happy with the automation of it.$template FilePerHost,"/var/log/syslog/system-%HOSTNAME%/%timegenerated:1:10:date-rfc3339%.log"My issue is that I have about 5000 plus network devices and some have pointer records and some do not so the folder system-%HOSTNAME% sometimes is an IP address and sometimes it is a hostname. What can I do on rsyslog to replace %HOSTNAME% in the template I use for the hostname value in the syslog message of the sending network deviceIn the message below *r-labl-r1* is the hostname? I don’t want to create pointer records for some many devices instead I rather use rsyslog to do the work .Jun 26 11:35:11 10.20.2.65 107526: r-lab-r1: Jun 26 15:35:11: %SEC-6-IPACCESSLOGP: list ACCESS-ACL denied udp 10.59.50.177(138) (Thanks in advance for all that looked and replied. Regards,jc
-- View this message in context: http://rsyslog-rsyslog-users.1305293.n2.nabble.com/replace-value-in-template-to-enhance-dynamic-file-name-tp7581019.html Sent from the rsyslog -- rsyslog-users mailing list archive at Nabble.com. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
