On Tue, Nov 20, 2018 at 3:41 PM Joe Blow via rsyslog < [email protected]> wrote:
> You don't need to load the omfile module at all, unless you're changing > config parameters: > <snip> > Don't even bother loading that, it should work without it. > > This is how I use omfile: > <snip> > action(type="omfile" file="/var/log/suricata.log" template="json_syslog") > <snip> > > The answer to your question #1 is in green. You do not need to load > the module at all for it to work, so your answer to #2 is "nothing". > > HTH > > Cheers, > > JB > How can I use omfile _only_ for authpriv.* ? ~ Mike _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
