On 3/13/2018 12:34 PM, LuKreme wrote:
On Mar 13, 2018, at 11:15, deoren 
<rsyslog-users-lists.adiscon....@whyaskwhy.org> wrote:
Here is an untested solution using the "advanced" format:


Oh my, that is fascinating,. I hadn't come across the advanced format yet, but 
that does look like it's a lot more readable, at least. I will definitely give 
that a shot, but I am going to have to grok it a little bit better before I do.

Understood. Here is another resource (one of a great many) which is good to look over:

https://selivan.github.io/2017/02/07/rsyslog-log-forward-save-filename-handle-multi-line-failover.html

Quick follow up on the old format:

ftp.info;ftp.warn

Does that exclude ONLY warnings, or warnings and higher (lower numeric code)?


TBH, I'm not sure. I try to not use the format unless forced to do so (that's just my personal preference).

More info on the format can be found here:

http://www.rsyslog.com/doc/v8-stable/configuration/sysklogd_format.html
https://wiki.gentoo.org/wiki/Rsyslog#Filtering

There are some formatting issues with the first link (in the queue to be fixed by a PR), but the information is still usable. The second has some coverage that you may find useful.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to