On Mon, 19 Jan 2015, Tait Clarridge wrote:
On Mon, Jan 19, 2015 at 9:03 AM, Brett Delle Grazie
<[email protected]> wrote:
Hi,
Is it possible to bind e.g. TCP input to multiple rule sets - so that two
copies of the output are generated?
For example:
$InputUDPServerBindRuleset local-file
$InputUDPServerBindRuleset remote-es
Where 'local-file' goes to local file system and 'remote-es' goes to
Elastic Search?
Hi Brett,
You could have one ruleset with multiple destinations. Where the
destination entries for local-file and remote-es are under a single
ruleset. Each can have its own formatting rules/templates etc.
you can also call one ruleset from inside another one.
but you cannot bind two rulesets to one input (after all, what should rsyslog
do, run one and then the other, if so which one? or run them in parallel, or
???)
using the old syntax like you are, the second declaration will override the
first. This is one of the places where the new syntax makes it much clearer
what's going on.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
