On your if, then statements where it says $source != 'loghost.example.com' \
What would I replace it with? %hostname% The reason I ask is that there will be many host names or IP addresses that I'm forwarding logs from. -----Original Message----- From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog-boun...@lists.adiscon.com] On Behalf Of Marcelo Veglienzone Sent: Wednesday, April 03, 2013 11:47 AM To: rsyslog-users Subject: Re: [rsyslog] Allocating certain logs to certain files Josh, This is what I'm currently using, http://pastebin.com/tsTHdsZY Starting at line 116 you'll find what you want On Wed, Apr 3, 2013 at 3:38 PM, Josh Bitto <jbi...@onlineschool.ca> wrote: > Ok here is my issue...on my cental rsyslog server I have in my config > file the following.... > > # This one is the template to generate the log filename dynamically, > depending on the client's IP address. > $template FILENAME,"/var/log/%fromhost-ip%/syslog.log" > > # Log all messages to the dynamically formed file. Now each clients > log (192.168.1.2, 192.168.1.3,etc...), will be under a separate > directory which is formed by the template FILENAME. > *.* ?FILENAME > > > That puts an output to my /var/log/<host IP>/syslog.log file. > > Essentially what I want is to have the same thing except separate > files for each log file /Dev/console /var/log/messages > /var/log/secure/ -/var/log/maillog /var/log/cron *.emerg > /var/log/spooler /var/log/boot.log > > How would I add that to the config to make it happen? > > The other thing....I still can't get httpd logs from remote servers to > forward to my central rsyslog server. > > Josh > > > > > Joshua Bitto > Information Technologist > KCC > > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE > WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
