When I did that I can only read the first input file and the rest of the input files have been ignored.
>________________________________ > From: Todd Mortensen <[email protected]> >To: Abdulnasir Shash <[email protected]>; rsyslog-users ><[email protected]> >Cc: Augie Schwer <[email protected]> >Sent: Monday, December 10, 2012 3:17 PM >Subject: Re: [rsyslog] Sending Multiple Files to Remote Server > >Currently no, you need to setup a file input entry for each file. > >On Mon, Dec 10, 2012 at 12:10 PM, Abdulnasir Shash <[email protected]> wrote: >> If I have multiple log files in my /home/logs directory, can I use a wild >> card to read all the logs and configure rsyslog.conf file like this one ? >> >> >> $InputFileName /home/logs/*.logs >> >> Thanks all >> >> >> >> >> >> >>>________________________________ >>> From: Augie Schwer <[email protected]> >>>To: Abdulnasir Shash <[email protected]>; rsyslog-users >>><[email protected]> >>>Sent: Wednesday, October 24, 2012 7:44 PM >>>Subject: Re: [rsyslog] Sending Multiple Files to Remote Server >>> >>>http://www.rsyslog.com/rhelcentos-rpms/ >>> >>>I used the RPMs there to install v7 on a CentOS 5.8 server. >>> >>>--Augie >>> >>>On Wed, Oct 24, 2012 at 9:57 AM, Abdulnasir Shash <[email protected]> wrote: >>>> Rainer; >>>> >>>> Thank you for quick response. However; I'm using rsyslog that is pre >>>> installed with RedHat 5.7. When I install the latest version of rsyslog, >>>> it will give me a library error. What do I have to make the latest version >>>> of rsyslog to work with RedHat 5.7 >>>> >>>> >>>> >>>> >>>> >>>>>________________________________ >>>>> From: Rainer Gerhards <[email protected]> >>>>>To: Abdulnasir Shash <[email protected]>; rsyslog-users >>>>><[email protected]> >>>>>Sent: Wednesday, October 24, 2012 11:48 AM >>>>>Subject: RE: [rsyslog] Sending Multiple Files to Remote Server >>>>> >>>>> >>>>> >>>>>> -----Original Message----- >>>>>> From: [email protected] [mailto:rsyslog- >>>>>> [email protected]] On Behalf Of Abdulnasir Shash >>>>>> Sent: Wednesday, October 24, 2012 5:46 PM >>>>>> To: rsyslog-users >>>>>> Subject: [rsyslog] Sending Multiple Files to Remote Server >>>>>> >>>>>> I have two files that i need to send to remote server with the >>>>>> following rsyslog.conf file >>>>>> >>>>>> $InputFileName /home/ashash/ashash1.log >>>>>> $InputFileTag DIT >>>>>> $InputFileStateFile DataIntake >>>>>> #$InputFileSeverity >>>>>> #$InputFileFacility >>>>>> $InputRunFileMonitor >>>>>> $InputFilePollInterval 10 >>>>>> >>>>>> >>>>>> $InputFileName /home/ashash/ashash2.log >>>>>> $InputFileTag DTR >>>>>> $InputFileStateFile DataTransmit >>>>>> #$InputFileSeverity >>>>>> #$InputFileFacility >>>>>> $InputRunFileMonitor >>>>>> $InputFilePollInterval 10 >>>>>> >>>>>> >>>>>> *.* @192.199.10.100 >>>>>> >>>>>> # Use traditional timestamp format >>>>>> $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat >>>>>> >>>>>> >>>>>> >>>>>> The problem is I can only see ashash1.log on remote server. Why can't >>>>>> I see ashash2.log on the remote server. >>>>>> >>>>>> I have attached when I ran it in a debug mode. >>>>>> >>>>>> ******************************************************************* >>>>>> 2340.677147000:main thread: Writing pidfile /var/run/rsyslogd.pid. >>>>>> 2340.677853000:main thread: rsyslog 3.22.1 - called init() >>>>> >>>>>That's an ancient version, it's probably just a bug with that. Use 6.6.0 >>>>>or -better- 7.2.0 and check if the problem persist. >>>>> >>>>>Rainer >>>>> >>>>>> 2340.677863000:main thread: Unloading non-static modules. >>>>>> 2340.677870000:main thread: module lmnet NOT unloaded because it still >>>>>> has a refcount of 3 >>>>>> 2340.677875000:main thread: Clearing templates. >>>>>> 2340.677919000:main thread: cfline: '$ModLoad imfile' >>>>>> 2340.677932000:main thread: Requested to load module 'imfile' >>>>>> 2340.677939000:main thread: loading module >>>>>> '/usr/lib64/rsyslog/imfile.so' >>>>>> 2340.678048000:main thread: module of type 0 being loaded. >>>>>> 2340.678060000:main thread: cfline: '$InputFileName >>>>>> /opt/espds/as/wso2/repository/logs/pda_data-intake_data-pull.log' >>>>>> 2340.678070000:main thread: cfline: '$InputFileTag DIT' >>>>>> 2340.678078000:main thread: cfline: '$InputFileStateFile DataIntake' >>>>>> 2340.678086000:main thread: cfline: '$InputRunFileMonitor' >>>>>> 2340.678096000:main thread: cfline: '$InputFilePollInterval 10' >>>>>> 2340.678105000:main thread: cfline: '$InputFileName >>>>>> /opt/espds/as/wso2/repository/logs/pda_data-transmit_push-data.log' >>>>>> 2340.678113000:main thread: cfline: '$InputFileTag DTR' >>>>>> 2340.678122000:main thread: cfline: '$InputFileStateFile >>>>>> DataTransmit' >>>>>> 2340.678130000:main thread: cfline: '$InputRunFileMonitor' >>>>>> 2340.678138000:main thread: cfline: '$InputFilePollInterval 10' >>>>>> 2340.678147000:main thread: cfline: '*.* @logging.sandbox.pda.org' >>>>>> 2340.678153000:main thread: - traditional PRI filter >>>>>> 2340.678206000:main thread: symbolic name: * ==> 255 >>>>>> 2340.678225000:main thread: tried selector action for builtin-file: - >>>>>> 2001 >>>>>> 2340.678235000:main thread: hostname 'logging.sandbox.pda.org', port >>>>>> '(null)' >>>>>> 2340.678241000:main thread: tried selector action for builtin-fwd: 0 >>>>>> 2340.678247000:main thread: Module builtin-fwd processed this config >>>>>> line. >>>>>> 2340.678258000:main thread: template: >>>>>> 'RSYSLOG_TraditionalForwardFormat' assigned >>>>>> 2340.678275000:main thread: action 1 queue: save on shutdown 1, max >>>>>> disk space allowed 0 >>>>>> 2340.678287000:main thread: action 1 queue: type 3, enq-only 0, disk >>>>>> assisted 0, maxFileSz 1048576, qsize 0, child 0, full delay 970, light >>>>>> delay 700 starting >>>>>> 2340.678295000:main thread: Action 0x7338d50: queue 0x7338e60 created >>>>>> 2340.678303000:main thread: cfline: '$ActionFileDefaultTemplate >>>>>> RSYSLOG_TraditionalFileFormat' >>>>>> 2340.678316000:main thread: selector line successfully processed >>>>>> _______________________________________________ >>>>>> rsyslog mailing list >>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>>>> http://www.rsyslog.com/professional-services/ >>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >>>>>> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST >>>>>> if you DON'T LIKE THAT. >>>>> >>>>> >>>>> >>>> _______________________________________________ >>>> rsyslog mailing list >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>> http://www.rsyslog.com/professional-services/ >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>> DON'T LIKE THAT. >>> >>> >>> >>>-- >>>Augie Schwer - [email protected] - http://schwer.us >>> >>> >>> >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T >> LIKE THAT. > > > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
