Even better, the total solution:
###############
if ($hostname != "aws-delta-mon") then {
$template
DynaFile,"/var/log/external/%HOSTNAME%/windows_events-%$YEAR%%$MONTH%%$DAY%.log"
*.* -?DynaFile
}
###############
This prevents the rsyslog server from logging everything in duplicate under
/var/log/external.
I realised somewhat late in the game that $template [pre-V6 notation] is
acceptable in v8 or post v6, but the issue I found, if you read the entire
thread here is that whilst it's acceptable syntactically, it just doesn't
work. Maybe there was something else missing in my rsyslog.conf, but it's
just not straightforward enough really. Hope this helps somebody going
forward. Call me lazy [and many do :D], but maybe the documentation could
use a bunch of tried and tested example use cases.
--
Sent from: http://rsyslog-users.1305293.n2.nabble.com/
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
