You can use the & ~ to accomplish thisYou'll need to add an if $programname ==
if $programname == 'NginxAccess' then @@syslog1:10518;commonForwardFormat & ~ On Wed, Jan 19, 2011 at 1:59 PM, Raffael Marty <[email protected]> wrote: > I have the following config: > > /etc/rsyslog.d/loggly-dal-nginx-access-prod.conf > $ModLoad imfile > $InputFileName /var/log/nginx/access.log > $InputFileTag nginx-access: > $InputFileStateFile stat-nginx-access > $InputRunFileMonitor > *.* @@logs.loggly.com:11111 > > /etc/rsyslog.d/loggly-dal-nginx-error-prod.conf > $ModLoad imfile > $InputFileName /var/log/nginx/error.log > $InputFileTag nginx-error: > $InputFileStateFile stat-nginx-error > $InputRunFileMonitor > *.* @@logs.loggly.com:22222 > > Two files to monitor. Each file I want to send to a different TCP port on > logs.loggly.com. Problem is that both logs show up on both ports. How do I > stop that behavior? Do I just add the "& ~" at the end of each block? > > Thanks! > > Raffael > > -- > Raffael Marty Founder and COO @ Loggly > @zrlram about.me/raffy > > > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
