OK, so you want to post-process messages, based on previous message content. rsyslog does not do these kind of things. Maybe you can use SEC for it. A simple and effcient solution may be to run a postprocessing script over the output files.
Rainer On Fri, Oct 4, 2013 at 1:31 PM, Mayur Patil <[email protected]>wrote: > Hi there, > > Thanks for the reply. My answers are in-line. Please have a look: > > >> can you explain a little more about what you are trying to do? >> > > I don't want to logs multiple entries of same component at same > timestamp. > > >> when you say you want to eliminate duplicate logs, what do you consider a >> duplicate? >> > > In this link, http://fpaste.org/44286/ > > what I observe is the component euca-cc is producing logs of two > things: > > instances and nodes. The duplicate is referred from the > > timestamp there are totally 3 repetitive entries of both *instances > and nodes. > > * > * *I want to eliminate them. > > why are there so many duplicates in the first place? > > > These are requests made by Cloud components to check state. > > >> How are these logs produced/transferred? >> > > They are produced from Eucalyptus cloud which I exported to remote > rSyslog server. > > In accordance with timestamp I want to eliminate them. > > Please correct if I am wrong, > > Seeking for guidance, > > Thanks !! > * > -- > * > *Cheers, > * > *Mayur* > > > > >> >> David Lang >> >> >> On Fri, 4 Oct 2013, Mayur Patil wrote: >> >> Hi there, >>> >>> I have searched for this but did not get all help. >>> >>> These are logs http://fpaste.org/43316/ >>> >>> These are the links I searched with: >>> >>> >>> http://www.rsyslog.com/**discarding-unwanted-messages/<http://www.rsyslog.com/discarding-unwanted-messages/> >>> >>> >>> http://unix.stackexchange.com/**questions/48894/is-it-** >>> possible-to-filter-duplicate-**lines-from-syslog<http://unix.stackexchange.com/questions/48894/is-it-possible-to-filter-duplicate-lines-from-syslog> >>> >>> Google search: how to filter duplicate logs in rsyslog >>> >>> >>> but did not succeed. >>> >>> Please guide, >>> >>> Thanks ! >> >> > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
