Yes, you are looking for the imfile function. It can read files not created or sent to the syslog process and can send them to other servers running a syslog process to save the file to another spot.
We use it to read audit logs and bro logs. On Apr 6, 2014 4:52 AM, "Barry Haycock" <[email protected]> wrote: > > > > Is it possible to monitor a log file (non syslog) and have the data sent to the remote host only. > > Currently I am monitoring a log file created by a script and the data from the log file is ending up in /var/log/messages on the local server, there is no need for it to be logged there, it should hopefully only be collected on the remote server > -- > > Barry > > Banpen Fugyou - 10,000 Changes, No surprises > > > > ---------------------------------------------------------------- > This message was sent using IMP, the Internet Messaging Program. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
