Jacob's answer is better, but I'll answer your questions below.

On 11/20/18 8:49 AM, Mike Schleif wrote:
What am I missing?

On Tue, Nov 20, 2018 at 9:15 AM Rich Megginson via rsyslog <
rsyslog@lists.adiscon.com> wrote:

You could try this:

# debug output

module(load="builtin:omfile" file="/var/log/rsyslog-debug.log"
template="RSYSLOG_TraditionalFileFormat")

If RSYSLOG_TraditionalFileFormat doesn't give you enough detail, try
RSYSLOG_DebugFormat

All of those events to be sent to the database are also going to
/var/log/secure.

Hmm - strange - it is ignoring file="/var/log/rsyslog-debug.log" ?


What is the purpose of this  rsyslog-debug.log?


To see what is being sent to mysql



Will this "debug output" rsyslog-debug.log be in _addition_ to regular
logfiles, or replace my current configuration?

Yes.



We currently have ~10 different logfiles - if this debug configuration
replaces the original, won't that concatenate all logs into one file?


It doesn't _replace_ the original, it is _in addition to_ the original.

Yes - so if that isn't acceptable, you'll have to add some sort of logic to say 
"only send the logs I'm sending to mysql to the debug log file"


~ Mike
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to