David, Thanks for the reply.
I used this if $fromhost-ip == '170.235.1.248' then stop if $fromhost-ip == '170.235.1.249' then stop but it did not work. Is that the correct syntax? I als restarted rsyslog. =========================== Thank You; Chris Cheltenham Technology Services The School District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 -----Original Message----- From: David Lang <[email protected]> Sent: Monday, April 23, 2018 4:28 PM To: Cheltenham, Chris via rsyslog <[email protected]> Cc: Cheltenham, Chris <[email protected]> Subject: Re: [rsyslog] excluding ip addresses On Mon, 23 Apr 2018, Cheltenham, Chris via rsyslog wrote: > How do I exclude ip addresses from being logged? > > > > I tried this .. > > > > #Ignore the 170.235.1.248 and 170.235.1.249 A 10 Load balancer health > checks > > if $fromhost-ip=='170.235.1.248' then > /dev/null/%FROMHOST-IP%/%syslogfacility-text%.log-I-I/%FROMHOST instead of this /dev/null stuff, just say 'stop' if $fromhost-ip == 'ip' then stop > if $fromhost-ip=='170.235.1.249' then > /dev/null/%FROMHOST-IP%/%syslogfacility-text%.log-I-I/%FROMHOST > > > > and > > > > #Ignore the 170.235.1.248 and 170.235.1.249 A 10 Load balancer health > checks k _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
