We put our "send to remote" action first, then add matching "stop" actions for keeping things that are not local.
E.g. if ($fromhost-ip != "127.0.0.1" and $fromhost-ip != "10.16.28.160" and $fromhost-ip != "192.168.10.34" and $fromhost-ip != "172.18.40.134" and $fromhost-ip != "192.168.122.1") then stop On Thu, Dec 17, 2015 at 8:21 AM, Muhammad Asif <[email protected]> wrote: > Hi Guys, > > I have a rsyslog server which is receiving logs from different sources and > then sending to fluentd. Problem is that our rsyslog sending logs to > fluentd and also writing all logs in syslog file which increases to 20GB. > I don't want to write coming logs in syslog. How can i achieve my goal. > > Thanks. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
