are you sure you have permission to write there? and double check that there are
no syntax errors (rsyslogd -N1)
if you have include files, it may help to start rsyslog with -o /path/to/file to
have rsyslog dump the config file as it understands it.
you should be getting something in those directories unless there is a
permission or config problem, no matter what the log contents are.
David Lang
On Mon, 8 Mar 2021, linksonice via rsyslog wrote:
Date: Mon, 8 Mar 2021 03:23:13 -0700 (MST)
From: linksonice via rsyslog <[email protected]>
To: [email protected]
Cc: linksonice <[email protected]>
Subject: Re: [rsyslog] another n00b question about logging clients logs to
their own directories based on hostnames
Using the RemoteHost template like so:
template(name="RemoteHost" type="string"
string="/var/log/external/%HOSTNAME%/windows_events-%$YEAR%%$MONTH%%$DAY%.log")
# Remote Logging
$RuleSet remote
?RemoteHost
I got nothing.
--
Sent from: http://rsyslog-users.1305293.n2.nabble.com/
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.