On Fri, 2014-08-15 at 00:17 +0300, Ivan Lezhnjov IV wrote: > I think I have pinpointed the problem where even though *.* > @@172.16.16.1:2514 was placed before any rules, the discard &~ affected it. > > I used to have *.* @@172.16.16.1:2514 right above $IncludeConfig (I also > tried every ridiculous options like Modules section, the very bottom of the > /etc/rsyslog.conf file -- all producing the same effect). Only when I created > /etc/rsyslog.d/10-send-to-remote.conf which contains a single line "*.* > @@172.16.16.1:2514" it started to work as I expected it too. > > So, my question to subscribers of this list now is if something like that is > expected? If it is, it seems rather counterintuitive because if I place *.* > @@172.16.16.1:2514 BEFORE $IncludeConfig I naturally assume that it will be > treated as the first line preceding any rules contained in configuration > include files. > > Ivan > >
Thanks for this thread Ivan...I'll try making a 10- file and see what happens. James _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

