Thanks, the helped un-stick me. I did this:
$template DynFile,"/var/log/app/syslog-%SYSLOGTAG%-%$YEAR%%$MONTH%%$DAY%.log" :syslogtag, startswith, "jps" ?DynFile & ~ It produced syslog-jps_log[31577][133720236]:-20140718.log in the right directory. A couple tweaks and I can probably fuss with the stupid startswith rule to make that dynamic too. The only thing unexpected is the [31577][133720236] bit in the tag. I wasn't expecting that, but it's a lot closer than it was. Thanks, -- J. On Fri, Jul 18, 2014 at 4:11 PM, Steve Clark <[email protected]> wrote: > On 07/18/2014 03:30 PM, Jason Stelzer wrote: > > Hi, I am using rsyslog-5.8.10 on linux. > > I want to define some output logs that look something like this: > > $basename-$date.log > > Where $basename comes from the syslog TAG value and $date is composed with > the $now/$hour/$minute properties on the syslog message. Thus, under some > prefix like /var/log/app, different components can log to syslog to their > own log files just by providing the tag for their component name. > > I am unclear as to how to get my output filename to be dynamic. I'm pretty > clear on how to use the tag to filter things to existing places with > constant names, but when I try to see how to use tag to compose an output > file rather than hard coding the path to a constant file, I find myself a > bit stuck. > > Thanks in advance for any tips. > > > Don't know if this will help - but this is how I set it to log remote > hosts into their own directories, with a log file by date. > ... > # log every host in its own directory > $template > DynFile,"/var/log/remotes-%HOSTNAME%/syslog-%HOSTNAME%-%$YEAR%%$MONTH%%$DAY%.log" > ... > # Remote Logging > $RuleSet remote > *.* -?DynFile > > -- > Stephen Clark > *NetWolves Managed Services, LLC.* > Director of Technology > Phone: 813-579-3200 > Fax: 813-882-0209 > Email: [email protected] > http://www.netwolves.com > -- J. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
