On Thu, Jul 4, 2013 at 11:29 PM, Josh Bitto <[email protected]> wrote:
> I think I don't have it quite right. I'm trying to forward a log file from
> an application on one server over to my central syslog server. So down to
> the nitty gritty.
>
> On the application server my config looks like this.
>
> $ModLoad imfile
> $InputFileName /var/log/alfresco/alfresco.log
> $InputFileTag alfresco-warn
> $InputFileStateFile stat-alfresco-warn
> $InputFileSeverity warn
> $InputFileFacility local0
> $InputRunFileMonitor
> local0.* @local.IP.ADDY:514
>
>
> On the central syslog server I have it setup like this.
>
>
> $template alfmess,"/var/log/hosts/%HOSTNAME%/messages"
> $template alfsuccess,"/var/log/hosts/%HOSTNAME%/success"
> if $source == 'FQDN' and $syslogseverity <= '5' then{
> *.* ?alfmess
> } else {
> *.* ?alfsuccess
> stop
> }
>
>
> Is this correct?
>
>
depends on what you want to do ;)
Rainer
>
>
>
> Joshua Bitto
> Information Technologist
> KCC
>
>
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
