Re: [rsyslog] excluding ip addresses

[David Lang]

log all your messages with the RSYSLOG_DebugFormat, then generate a lot message from one of your sources with an easy-to-grep content (I find that 'testtest' doesn't appear in anything legit)

Then find that content in the log. Post the entire log messate (all 10 lines) here and we can see what isn't the way you expect it to be.

schooldistrict_phila.tar.gz
Description: application/compressed-tar

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.