Hello, is this a sane config? I am trying to save incoming remote logs to
an NFS mount, and to local disk in case NFS hard locks for some time. Maybe
LOCAL part is not needed at all?

****
$template
Tdefault,"/logs/syslog/%fromhost-ip%/%$YEAR%/%$MONTH%/%syslogfacility-text%.%$YEAR%-%$MONTH%-%$DAY%.log"
$template
TdefaultBackup,"/var/log/backups/%fromhost-ip%.%$YEAR%-%$MONTH%-%$DAY%.log"
$template
Tcritical,"/logs/syslog/%fromhost-ip%/%$YEAR%/%$MONTH%/critical.%$YEAR%-%$MONTH%-%$DAY%.log"
$template FileFormat,"%TIMESTAMP:::date-rfc3339% %HOSTNAME%
%syslogtag%%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n"

$WorkDirectory /var/log/rsspool

# NAS
$ActionQueueType LinkedList # use asynchronous processing
$ActionQueueFileName nfsq    # set file name, also enables disk mode
$ActionResumeRetryCount -1  # infinite retries on insert failure
*.err
-?Tcritical;FileFormat
*.*
-?Tdefault;FileFormat

# LOCAL
$ActionQueueType LinkedList # use asynchronous processing
$ActionQueueFileName diskq    # set file name, also enables disk mode
$ActionResumeRetryCount 0  # default
*.*
-?TdefaultBackup;FileFormat
****

Thank you,
IgnasR
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards

Reply via email to