Or authpriv.* action(...)
Or any other filter. But you cannot do Authpriv.* Input() Because this makes no sense at all. Rainer Sent from phone, thus brief. Am Mi., 21. Nov. 2018, 20:55 hat Rainer Gerhards <[email protected]> geschrieben: > > > Am Mi., 21. Nov. 2018, 20:44 hat Mike Schleif < > [email protected]> geschrieben: > >> On Wed, Nov 21, 2018 at 12:01 PM Rainer Gerhards < >> [email protected]> >> wrote: >> >> > El mié., 21 nov. 2018 a las 16:23, Mike Schleif >> > (<[email protected]>) escribió: >> > > Now, how can I send all log entries containing a fixed string to a new >> > > logfile? >> > >> > https://www.rsyslog.com/doc/v8-stable/configuration/filters.html >> >> >> How to configure _actions_ with Property-Based Filters? >> > > You can only configure actions with filters. For all other objects it > makes no sense. > > It's > > Filter action > > Or > > Filter { action1, action 2, ...} > > If you have multiple for the same filter. > > Overview: > https://www.rsyslog.com/doc/v8-stable/configuration/basic_structure.html#quick-overview-of-message-flow-and-objects > > Sample: > > If $rawmsg contains "bla" Action(...) > > HTH > Rainer > > > >> ~ Mike >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
