Managed to figure out another solution: ############## $template DynaFile,"/var/log/external/%HOSTNAME%/windows_events-%$YEAR%%$MONTH%%$DAY%.log" *.* -?DynaFile ##############
Not really sure what's special about DynaFile as opposed to the way I was doing it before. Are these not arbitrary names, chosen for templates? Anyway now, even my local Linux [rsyslog server] logs like that. It's all fair progress in any case, and there are, as always many ways to skin a cat, but what would you say is the optimal way to make the LOCAL machine, the rsyslog server here, NOT log to anything in /var/log/external, and just keep on logging to /var/log/messages? That would be my preference. Thanks for your comments. -- Sent from: http://rsyslog-users.1305293.n2.nabble.com/ _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

