This is the only thing happening in rsyslog.d:
##############
[root@aws-delta-mon etc]# cat rsyslog.d/21-cloudinit.conf
# Log cloudinit generated log messages to file
:syslogtag, isequal, "[CLOUDINIT]" /var/log/cloud-init.log
# comment out the following line to allow CLOUDINIT messages through.
# Doing so means you'll also get CLOUDINIT messages in /var/log/syslog
& stop
##############
Apart from that the perms are fine, because using the other method I
researched:
##############
if $fromhost-ip == '10.10.10.5' then {
# action(type="omfile"
file="/var/log/external/ISS-Delta-TS1/windows_events-%$YEAR%%$MONTH%%$DAY%.log")
action(type="omfile"
file="/var/log/external/ISS-Delta-TS1/windows_events.log")
stop
}
##############
works fine, considering it auto-generated both the parent directories under
/blah/blah/external, and the windows_events.logs within them.
Running
rsyslogd -N1 -o /tmp/boom.cfg
and then
rsyslogd -N1 -f /tmp/boom.cfg
shows no issue either.
--
Sent from: http://rsyslog-users.1305293.n2.nabble.com/
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.