On 3/13/2018 12:34 PM, LuKreme wrote:
On Mar 13, 2018, at 11:15, deoren
<rsyslog-users-lists.adiscon....@whyaskwhy.org> wrote:
Here is an untested solution using the "advanced" format:
Oh my, that is fascinating,. I hadn't come across the advanced format yet, but
that does look like it's a lot more readable, at least. I will definitely give
that a shot, but I am going to have to grok it a little bit better before I do.
Understood. Here is another resource (one of a great many) which is good
to look over:
https://selivan.github.io/2017/02/07/rsyslog-log-forward-save-filename-handle-multi-line-failover.html
Quick follow up on the old format:
ftp.info;ftp.warn
Does that exclude ONLY warnings, or warnings and higher (lower numeric code)?
TBH, I'm not sure. I try to not use the format unless forced to do so
(that's just my personal preference).
More info on the format can be found here:
http://www.rsyslog.com/doc/v8-stable/configuration/sysklogd_format.html
https://wiki.gentoo.org/wiki/Rsyslog#Filtering
There are some formatting issues with the first link (in the queue to be
fixed by a PR), but the information is still usable. The second has some
coverage that you may find useful.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
