If there is a common hostname pattern, you can do much better.
--
Regards,
Janmejay
PS: Please blame the typos in this mail on my phone's uncivilized soft
keyboard sporting it's not-so-smart-assist technology.
On Mar 23, 2015 4:19 PM, "Rainer Gerhards" <rgerha...@hq.adiscon.com> wrote:
> 2015-03-23 11:28 GMT+01:00 <christopher.ra...@web.de>:
> > Hello,
> >
> > I have a about 2000 systems logging to a rsyslog server.
> > On the server, I want to forward log data (of 1000 servers) to an other
> destination, while the rest logs to a file locally.
> >
> > Of course, I could define for each host an own config-file with an
> action or maybe ruleset like this:
> > if $fromhost-ip == '192.168.152.137' then {
> > action(type="omfile" file="/var/log/remotefile02")
> > stop
> > }
>
> Use array-based comparisons. They have log(n) complexity:
> if $fromhost-ip == ['192.168.152.137' , "...", ...] then {
>
> HTH
> Rainer
>
> >
> > But I guess, this leads to a quite bad performace (very big
> configuration...) and also has not much flexibility.
> > (At least the host-list might change day by day).
> >
> > Do you have any recommendation how to implement such a scenario with
> rsyslog in a performant way?
> >
> > Best regards
> > Chris
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
