Btw, this syntax is working, too. authpriv.* /var/log/rsyslog-debug.log;RSYSLOG_DebugFormat
Flo On Wed, Nov 21, 2018 at 3:21 PM Mike Schleif <[email protected]> wrote: > On Tue, Nov 20, 2018 at 3:41 PM Joe Blow via rsyslog < > [email protected]> wrote: > > > You don't need to load the omfile module at all, unless you're changing > > config parameters: > > <snip> > > Don't even bother loading that, it should work without it. > > > > This is how I use omfile: > > <snip> > > action(type="omfile" file="/var/log/suricata.log" template="json_syslog") > > <snip> > > > > The answer to your question #1 is in green. You do not need to load > > the module at all for it to work, so your answer to #2 is "nothing". > > > > HTH > > > > Cheers, > > > > JB > > > > How can I use omfile _only_ for authpriv.* ? > > ~ Mike > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
