Hello, I have a about 2000 systems logging to a rsyslog server. On the server, I want to forward log data (of 1000 servers) to an other destination, while the rest logs to a file locally. Of course, I could define for each host an own config-file with an action or maybe ruleset like this: if $fromhost-ip == '192.168.152.137' then { action(type="omfile" file="/var/log/remotefile02") stop }
But I guess, this leads to a quite bad performace (very big configuration...) and also has not much flexibility. (At least the host-list might change day by day). Do you have any recommendation how to implement such a scenario with rsyslog in a performant way? Best regards Chris _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.