Jacob's answer is better, but I'll answer your questions below.
On 11/20/18 8:49 AM, Mike Schleif wrote:
What am I missing?
On Tue, Nov 20, 2018 at 9:15 AM Rich Megginson via rsyslog <
rsyslog@lists.adiscon.com> wrote:
You could try this:
# debug output
module(load="builtin:omfile" file="/var/log/rsyslog-debug.log"
template="RSYSLOG_TraditionalFileFormat")
If RSYSLOG_TraditionalFileFormat doesn't give you enough detail, try
RSYSLOG_DebugFormat
All of those events to be sent to the database are also going to
/var/log/secure.
Hmm - strange - it is ignoring file="/var/log/rsyslog-debug.log" ?
What is the purpose of this rsyslog-debug.log?
To see what is being sent to mysql
Will this "debug output" rsyslog-debug.log be in _addition_ to regular
logfiles, or replace my current configuration?
Yes.
We currently have ~10 different logfiles - if this debug configuration
replaces the original, won't that concatenate all logs into one file?
It doesn't _replace_ the original, it is _in addition to_ the original.
Yes - so if that isn't acceptable, you'll have to add some sort of logic to say
"only send the logs I'm sending to mysql to the debug log file"
~ Mike
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.