On Tue, 3 Feb 2015, Asif Iqbal wrote:
Hi All,
I am using local0,local1,.. facilities as my filter, so I have only 8
filters. I have more than 8 types
of devices I receive log from.
Is it possible to start a second rsyslogd instances listening on another
IPv4 IP, so I can get 8 more
locals?
I went through the man page and I do not if I can have multiple rsyslogd
running on different IPs.
Is it possible? I rather stick with traditional filtering and go with
mutiple rsyslogd instances on
seprate IPs. I am not planning to run multiple containers to fix this. I
rather not start with syslog-ng
to achieve this and keep it as standard centos install as possible.
I am using centos 6. Currently I am on rsyslog 5.8.10 which comes with
centos 6.
as long as you never mix logs from your different instances of rsyslog then
what's local0 doesn't need to have anything to do with what's local0 in another.
but if you ever have the logs touch, there is no way to tell the difference
between the different local0s that you've created.
But why are you wanting to limit yourself to using facility/severity filtering?
you can filter on anything else (a very common thing is to filter on the
programname), which is far more powerful.
When you deliver logs between machines you can even filter on multiple
conditions, so you can filter on the combination of hostname and programname.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
