Yep, I can filter directly into graylog but the reboot of 150 servers generate thousand of lines into graylog.
I would like to avoid consuming bandwidth and storage on my graylog server instead of filter on it. October 12, 2020 10:32 AM, "Rainer Gerhards" <[email protected]> wrote: > just an idea: could you filter out certain strings? > > Rainer > > El lun., 12 oct. 2020 a las 10:00, Unam via rsyslog > (<[email protected]>) escribió: > >> Hi there, >> >> I am using rsyslog to send all our logs on a remote graylog server. The >> config on every host >> (Debian 9 & 10) is quite simple, we send by default everything. >> All our servers are rebooted every night and we receive tons of logs that we >> don't care about. >> >> My question is maybe very simple but, is there an option in rsyslog to >> filters this logs and don't >> send them to the remote ? >> >> I searched in the doc but nothing seems to talk about boot sequence. I >> already tried to edit >> grub.cfg to make the boot process silent without success. >> >> Thanks for your hints. >> >> Regards, >> _______________________________________________ >> rsyslog mailing list >> https://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of >> sites beyond our >> control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
