On Wed, Oct 16, 2013 at 5:21 PM, Micah Anderson <[email protected]> wrote:

>
> Hello,
>
> Is there an easy way that I can apply an action to all facilities,
> without having to list it for each facility?
>
> I want to have the mmanon action configured for every log facility, I
> can do that individually like so:
>
> mail.*                          {
>                                 action(type="mmanon" ipv4.bits="32"
> mode="rewrite")
>                                 action(type="omfile"
> file="/var/log/mail.log")
>                                 }
>
>
yup, just remove the filter for that part that you don't need ;) Like in
this snippet

action(type="mmanon" ipv4.bits="32" mode="rewrite")
# from here on, everything is anonymized
mail.*                       {
                                action(type="omfile"
file="/var/log/mail.log")
                                }

Or -equivalent and shorter-

action(type="mmanon" ipv4.bits="32" mode="rewrite")
# from here on, everything is anonymized
mail.*                       action(type="omfile" file="/var/log/mail.log")

Note that this is not special to mmanon - this work with all actions.
Rainer


> but then I need to do that for each one. Is there a way I can apply the
> mmanon action to everything at a global level?
>
> thanks for any ideas!
> micah
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to