On Mon, 7 May 2018, Haary rock wrote:
Thanks for the quick reply .. I didn't get what you mean by "disabling the main
queue" ..
setting the main queue to 'direct' means that you are disabling the queue and
instead of incoming messages getting added to the queue, you process each
message as it arrives and everything else waits.
also I don't understand why its still being written on local files even after
putting the stop .
as same in the examples ..
if $fromhost-ip == '172.X.X.X' then {action(type="omfile"
file="/opt/apps/syslog/fw2.log")stop}
show us a sample log in the RSYSLOG_DebugFormat that you think should not be put
into other logs.
remember, the config is processed in order, so if you have filters that output
the data before you hit the line that does the stop, those other files already
have the data in it before you get to the point of saying stop.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
