On 7/11/17 2:59 AM, David Lang wrote:
unfortunantly, this is a gap in rsyslog's capabilities. What you can do
is assign a ruleset to all remote inputs, and then what's left is the
/dev/log (and rsyslog internal) logs
you can also test the input of a log message and call a ruleset
Thanks. I called myself assigning a ruleset to all remote inputs, but
believed I had found log entries from remote systems in local files. I
suspected when I saw it that I have an error in my configuration
somewhere, but haven't spent the time to track it down yet.
I checked just now and couldn't find any occurrence in the recent local
logs on the remote rsyslog receiver, so it's likely it was a momentary
issue due to a configuration mistake.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
