change to the new if ... then syntax, it lets you do complex expressions.
there is no reason to write any new filters using the old syntax. There was a
time when the old syntax was faster, but that went away many years ago.
David Lang
On Wed, 17 Feb 2021, ashutosh via rsyslog wrote:
Date: Wed, 17 Feb 2021 15:29:44 -0700
From: ashutosh via rsyslog <rsyslog@lists.adiscon.com>
To: rsyslog@lists.adiscon.com
Cc: ashutosh <ashuco...@gmail.com>
Subject: Re: [rsyslog] rsyslog filters.
Any help is appreciated.
On Wed, Feb 17, 2021 at 3:17 PM ashutosh <ashuco...@gmail.com> wrote:
Hi Team,
I have one question related to rsyslog filters. I need to search two
keywords in my log file and send those to papertrail. Keywords are - ERROR:
& FATAL:
I tried something like that, but it didn't work.
:msg, contains, "ERROR:" or "FATAL:" @logs6.papertrailapp.com:10000
Kindly advice.
Thanks,
--
Regards,
Ashutosh Durugkar
Database Admin Oracle & PostgreSQL.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
