If there is a common hostname pattern, you can do much better. -- Regards, Janmejay
PS: Please blame the typos in this mail on my phone's uncivilized soft keyboard sporting it's not-so-smart-assist technology. On Mar 23, 2015 4:19 PM, "Rainer Gerhards" <rgerha...@hq.adiscon.com> wrote: > 2015-03-23 11:28 GMT+01:00 <christopher.ra...@web.de>: > > Hello, > > > > I have a about 2000 systems logging to a rsyslog server. > > On the server, I want to forward log data (of 1000 servers) to an other > destination, while the rest logs to a file locally. > > > > Of course, I could define for each host an own config-file with an > action or maybe ruleset like this: > > if $fromhost-ip == '192.168.152.137' then { > > action(type="omfile" file="/var/log/remotefile02") > > stop > > } > > Use array-based comparisons. They have log(n) complexity: > if $fromhost-ip == ['192.168.152.137' , "...", ...] then { > > HTH > Rainer > > > > > But I guess, this leads to a quite bad performace (very big > configuration...) and also has not much flexibility. > > (At least the host-list might change day by day). > > > > Do you have any recommendation how to implement such a scenario with > rsyslog in a performant way? > > > > Best regards > > Chris > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.