Am Mi., 21. Nov. 2018, 20:44 hat Mike Schleif <[email protected]> geschrieben:
> On Wed, Nov 21, 2018 at 12:01 PM Rainer Gerhards <[email protected] > > > wrote: > > > El mié., 21 nov. 2018 a las 16:23, Mike Schleif > > (<[email protected]>) escribió: > > > Now, how can I send all log entries containing a fixed string to a new > > > logfile? > > > > https://www.rsyslog.com/doc/v8-stable/configuration/filters.html > > > How to configure _actions_ with Property-Based Filters? > You can only configure actions with filters. For all other objects it makes no sense. It's Filter action Or Filter { action1, action 2, ...} If you have multiple for the same filter. Overview: https://www.rsyslog.com/doc/v8-stable/configuration/basic_structure.html#quick-overview-of-message-flow-and-objects Sample: If $rawmsg contains "bla" Action(...) HTH Rainer > ~ Mike > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
