On Tue, 29 Sep 2015, Amar Johal wrote:
Hello, I'm monitoring a file, and it's working fine but I see that it's logging the contents of the log file also in /var/log/messages. I have an if statement at the end that should discard after it's sent the logs over to Loggly, so I am not certain why it's also logging to /var/log/messages. Any thoughts/ideas? If statement looks like the below: if $programname == 'apache-acc' then @@logs-01.loggly.com:6514 ;LogglyFormatapache-acc if $programname == 'apache-acc' then ~
we would need to see the full config to have any idea what's happening. Do you have include files? where are the files included? what syslog version are you running (there was a time that included files wer used in reverse order), etc.
In general, I discourage use of stop with include files, it makes it very confusing to track down what's happening.
you can also do rsyslogd -N2 to have rsyslog check the syntax of the various files, and if there is a syntax error, strange things can happen.
David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
