What did you try to do? I suspect that you need a bunch more items for each of
the additional entries.
David Lang
On Mon, 10 Dec 2012, Abdulnasir Shash wrote:
When I did that I can only read the first input file and the rest of the input
files have been ignored.
________________________________
From: Todd Mortensen <[email protected]>
To: Abdulnasir Shash <[email protected]>; rsyslog-users
<[email protected]>
Cc: Augie Schwer <[email protected]>
Sent: Monday, December 10, 2012 3:17 PM
Subject: Re: [rsyslog] Sending Multiple Files to Remote Server
Currently no, you need to setup a file input entry for each file.
On Mon, Dec 10, 2012 at 12:10 PM, Abdulnasir Shash <[email protected]> wrote:
If I have multiple log files in my /home/logs directory, can I use a wild card
to read all the logs and configure rsyslog.conf file like this one ?
$InputFileName /home/logs/*.logs
Thanks all
________________________________
From: Augie Schwer <[email protected]>
To: Abdulnasir Shash <[email protected]>; rsyslog-users
<[email protected]>
Sent: Wednesday, October 24, 2012 7:44 PM
Subject: Re: [rsyslog] Sending Multiple Files to Remote Server
http://www.rsyslog.com/rhelcentos-rpms/
I used the RPMs there to install v7 on a CentOS 5.8 server.
--Augie
On Wed, Oct 24, 2012 at 9:57 AM, Abdulnasir Shash <[email protected]> wrote:
Rainer;
Thank you for quick response. However; I'm using rsyslog that is pre installed
with RedHat 5.7. When I install the latest version of rsyslog, it will give me
a library error. What do I have to make the latest version of rsyslog to work
with RedHat 5.7
________________________________
From: Rainer Gerhards <[email protected]>
To: Abdulnasir Shash <[email protected]>; rsyslog-users
<[email protected]>
Sent: Wednesday, October 24, 2012 11:48 AM
Subject: RE: [rsyslog] Sending Multiple Files to Remote Server
-----Original Message-----
From: [email protected] [mailto:rsyslog-
[email protected]] On Behalf Of Abdulnasir Shash
Sent: Wednesday, October 24, 2012 5:46 PM
To: rsyslog-users
Subject: [rsyslog] Sending Multiple Files to Remote Server
I have two files that i need to send to remote server with the
following rsyslog.conf file
$InputFileName /home/ashash/ashash1.log
$InputFileTag DIT
$InputFileStateFile DataIntake
#$InputFileSeverity
#$InputFileFacility
$InputRunFileMonitor
$InputFilePollInterval 10
$InputFileName /home/ashash/ashash2.log
$InputFileTag DTR
$InputFileStateFile DataTransmit
#$InputFileSeverity
#$InputFileFacility
$InputRunFileMonitor
$InputFilePollInterval 10
*.* @192.199.10.100
# Use traditional timestamp format
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
The problem is I can only see ashash1.log on remote server. Why can't
I see ashash2.log on the remote server.
I have attached when I ran it in a debug mode.
*******************************************************************
2340.677147000:main thread: Writing pidfile /var/run/rsyslogd.pid.
2340.677853000:main thread: rsyslog 3.22.1 - called init()
That's an ancient version, it's probably just a bug with that. Use 6.6.0 or
-better- 7.2.0 and check if the problem persist.
Rainer
2340.677863000:main thread: Unloading non-static modules.
2340.677870000:main thread: module lmnet NOT unloaded because it still
has a refcount of 3
2340.677875000:main thread: Clearing templates.
2340.677919000:main thread: cfline: '$ModLoad imfile'
2340.677932000:main thread: Requested to load module 'imfile'
2340.677939000:main thread: loading module
'/usr/lib64/rsyslog/imfile.so'
2340.678048000:main thread: module of type 0 being loaded.
2340.678060000:main thread: cfline: '$InputFileName
/opt/espds/as/wso2/repository/logs/pda_data-intake_data-pull.log'
2340.678070000:main thread: cfline: '$InputFileTag DIT'
2340.678078000:main thread: cfline: '$InputFileStateFile DataIntake'
2340.678086000:main thread: cfline: '$InputRunFileMonitor'
2340.678096000:main thread: cfline: '$InputFilePollInterval 10'
2340.678105000:main thread: cfline: '$InputFileName
/opt/espds/as/wso2/repository/logs/pda_data-transmit_push-data.log'
2340.678113000:main thread: cfline: '$InputFileTag DTR'
2340.678122000:main thread: cfline: '$InputFileStateFile
DataTransmit'
2340.678130000:main thread: cfline: '$InputRunFileMonitor'
2340.678138000:main thread: cfline: '$InputFilePollInterval 10'
2340.678147000:main thread: cfline: '*.* @logging.sandbox.pda.org'
2340.678153000:main thread: - traditional PRI filter
2340.678206000:main thread: symbolic name: * ==> 255
2340.678225000:main thread: tried selector action for builtin-file: -
2001
2340.678235000:main thread: hostname 'logging.sandbox.pda.org', port
'(null)'
2340.678241000:main thread: tried selector action for builtin-fwd: 0
2340.678247000:main thread: Module builtin-fwd processed this config
line.
2340.678258000:main thread: template:
'RSYSLOG_TraditionalForwardFormat' assigned
2340.678275000:main thread: action 1 queue: save on shutdown 1, max
disk space allowed 0
2340.678287000:main thread: action 1 queue: type 3, enq-only 0, disk
assisted 0, maxFileSz 1048576, qsize 0, child 0, full delay 970, light
delay 700 starting
2340.678295000:main thread: Action 0x7338d50: queue 0x7338e60 created
2340.678303000:main thread: cfline: '$ActionFileDefaultTemplate
RSYSLOG_TraditionalFileFormat'
2340.678316000:main thread: selector line successfully processed
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
--
Augie Schwer - [email protected] - http://schwer.us
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
