Hey all,
So...this is long overdue for me to fix this. Here's my setup with
rsyslog 8.24.0 (sanitized):
module(load="imfile")
input(type="imfile"
File="file1"
Tag="file1")
input(type="imfile"
File="logfile"
Tag="file2")
input(type="imfile"
File="file"
Tag="file3")
input(type="imfile"
File="file"
Tag="file3")
if ($syslogtag == "file1") then { action(type="omfwd" Target="bleh"
Port="6514" Protocol="udp") } else
if ($syslogtag == "file2") then { action(type="omfwd"
Target="bleh" Port="5514" Protocol="udp") } else
if ($syslogtag == "file3") then { action(type="omfwd"
Target="bleh" Port="8514" Protocol="tcp") } else {
*.*;local7.none @bleh
}
In a nutshell I'm trying to send all logs to a remote syslog server, and
ALSO send four monitor files to a remote collector. My issues is that
the content of the files I'm monitor, show up in the remote syslog
(@bleh).
In other instance I have a similar setup:
10-filter.conf:
module(load="imfile" PollingInterval="10")
input(type="imfile"
File="/var/log/messages"
Tag="syslog"
StateFile="messagesstate")
input(type="imfile"
File="file1"
Tag="file1"
StateFile="file1state")
input(type="imfile"
File="file2"
Tag=file2"
StateFile="file2state")
50-default-conf
$FileCreateMode 0644
*.* -/var/log/messages
Here as well, all information from file1 and file2 show up in
/var/log/messages. How can I tell rsyslog to not log the additional
files to the actual syslog/messages file? Thank you.
James
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
