[rsyslog] forwarding for a specific host (secondary destination based on sender)

2017-09-20 Thread Don M Subscriptions via rsyslog
Greetings. We have a firewall and some other sources sending data to our syslog server and we would like to forward the original message from one of the input sources to a supplemental log collector. In other words, I would like to take logs from 192.168.1.1 and send it to two destinations.

Re: [rsyslog] forwarding for a specific host (secondary destination based on sender)

2017-09-20 Thread Andrew Griffin via rsyslog
You can do this pretty easily by having a ruleset with two actions in it, e.g: ruleset ( name = dupe_logs ) { action ( name = "send_to_file" type = "omfile" file = "/logs/mylog.log" ) action ( name = "send_to_other_log_collector"

Re: [rsyslog] forwarding for a specific host (secondary destination based on sender)

2017-09-20 Thread Don M Subscriptions via rsyslog
Thank you. On 9/20/2017 1:28 PM, Andrew Griffin wrote: You can do this pretty easily by having a ruleset with two actions in it, e.g: ruleset ( name = dupe_logs ) {      action (           name = "send_to_file"           type  = "omfile"           file = "/logs/mylog.log"      )      action (  

[rsyslog] Imkafka problem on topic subscription

2017-09-20 Thread Luigi Tagliamonte via rsyslog
Dear community, sorry if I'm re-posting here the GitHub issue https://github.com/rsyslog/rsyslog/issues/1771 , I'm try to reach other people that maybe had my same problem. I'trying to build a centralized logging system using: omkafka -> kafka -> imkafka -> omfile The rsyslog sender