I did setup on ubuntu 12 with rsyslog version 8.23 but nothing get logged to my local as well as loggly.
I also tried on ubuntu-16 with rsyslog version 8.5, but nothing is getting logged. Moreover , I went thorough the slide at the link below, where it is mentioned to use inotify mode. Where to set inotify mode? My second issue is I am not able to log anything at /var/log/syslog. Even i am not seeing syslog file in /var/log. I have checked /etc/rsyslog.conf file but the line in that file is uncommented. Thanks for you quick response. Shweta On Thu, Dec 29, 2016 at 2:09 PM, David Lang [via rsyslog-users] < [email protected]> wrote: > you don't say what version you are running, the most current docs are at: > http://www.rsyslog.com/doc/v8-stable/configuration/modules/imfile.html > > I'm not sure exactly when wildcards became supported, but I believe it was > well > into the 8.x series. > > David Lang > > On Wed, 28 Dec 2016, Shweta wrote: > > > Date: Wed, 28 Dec 2016 23:21:14 -0700 (MST) > > From: Shweta <[hidden email] > <http:///user/SendEmail.jtp?type=node&node=7592049&i=0>> > > Reply-To: rsyslog-users <[hidden email] > <http:///user/SendEmail.jtp?type=node&node=7592049&i=1>> > > To: [hidden email] > <http:///user/SendEmail.jtp?type=node&node=7592049&i=2> > > Subject: [rsyslog] Wildcard Support to log all the file logs of a > directory > > > > Hi Support, > > > > I want to monitor file logs at Loggly. I have many files in a directory > and > > want to monitor them all with a wildcard. I have a configuration like > below: > > > > $ModLoad imfile > > $InputFilePollInterval 10 > > $PrivDropToGroup adm > > $WorkDirectory /var/spool/rsyslog > > > > # Input for FILE1 > > $InputFileName /FILE1 > > $InputFileTag APPNAME1 > > $InputFileStateFile stat-APPNAME1 #this must be unique for each file > being > > polled > > $InputFileSeverity info > > $InputFilePersistStateInterval 20000 > > $InputRunFileMonitor > > > > # Add a tag for file events > > $template LogglyFormatFile,"<%pri%>%protocol-version% > > %timestamp:::date-rfc3339% %HOSTNAME% %app-name% %procid% %msgid% > > [TOKEN@41058 tag=\"file\"] %msg%\n" > > > > # Send to Loggly then discard > > if $programname == 'APPNAME1' then @@logs-01.loggly.com:514;LogglyFormatFile > > > if $programname == 'APPNAME1' then ~ > > > > What I want is to use wildcard as > > > > $InputFileName /directory/*.txt > > > > or $InputFileName /directory/* > > > > Please consider my case on priority. > > > > Thanks > > > > > > > > > > > > -- > > View this message in context: http://rsyslog-users.1305293. > n2.nabble.com/Wildcard-Support-to-log-all-the-file- > logs-of-a-directory-tp7592048.html > > Sent from the rsyslog-users mailing list archive at Nabble.com. > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > > > ------------------------------ > If you reply to this email, your message will be added to the discussion > below: > http://rsyslog-users.1305293.n2.nabble.com/Wildcard- > Support-to-log-all-the-file-logs-of-a-directory-tp7592048p7592049.html > To unsubscribe from Wildcard Support to log all the file logs of a > directory, click here > <http://rsyslog-users.1305293.n2.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=7592048&code=c2phaW5AbG9nZ2x5LmNvbXw3NTkyMDQ4fC02MDgzODE4NDg=> > . > NAML > <http://rsyslog-users.1305293.n2.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml> > -- Thank you, Shweta Jain -- View this message in context: http://rsyslog-users.1305293.n2.nabble.com/Wildcard-Support-to-log-all-the-file-logs-of-a-directory-tp7592048p7592053.html Sent from the rsyslog-users mailing list archive at Nabble.com. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
