[rsyslog] RFC 5424 and rsyslog

Hi, I'm using 7.4.4-1ubuntu2.3 (on Ubuntu). I'd like to use RFC 5424 as both the transport (from client to server) and file-based storage for an rsyslog server with the intention to push the messages into Elastic Search (always keeping a centralised file copy for permanent store). >From browsing

[rsyslog] Binding an input to multiple rulesets

Hi, Is it possible to bind e.g. TCP input to multiple rule sets - so that two copies of the output are generated? For example: $InputUDPServerBindRuleset local-file $InputUDPServerBindRuleset remote-es Where 'local-file' goes to local file system and 'remote-es' goes to Elastic Search? If not,

Re: [rsyslog] Binding an input to multiple rulesets

On 19 January 2015 at 17:23, David Lang wrote: > On Mon, 19 Jan 2015, Tait Clarridge wrote: > > On Mon, Jan 19, 2015 at 9:03 AM, Brett Delle Grazie >> wrote: >> >>> Hi, >>> >>> Is it possible to bind e.g. TCP input to multiple rule sets - so

Re: [rsyslog] Binding an input to multiple rulesets

On 19 January 2015 at 21:58, David Lang wrote: > On Mon, 19 Jan 2015, Brett Delle Grazie wrote: > > On 19 January 2015 at 17:23, David Lang wrote: >> >> On Mon, 19 Jan 2015, Tait Clarridge wrote: >>> >>> On Mon, Jan 19, 2015 at 9:03 AM, Brett Dell

Re: [rsyslog] Best practice for an application to get structured data to rsyslog

ol. PLEASE UNSUBSCRIBE and DO NOT POST if you >>> DON'T LIKE THAT. >>> >>> ___ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >

[rsyslog] Config guidance requested

/var/log/spooler local7.* /var/log/boot.log Thanks, -- Best Regards, Brett Delle Grazie ___ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

Re: [rsyslog] Config guidance requested

config issues? e.g. Should I be using LinkedList for the main queue? Particularly on the loghost? > > Rainer > >> -Original Message- >> From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog- >> boun...@lists.adiscon.com] On Behalf Of Brett Delle Grazie >>

Re: [rsyslog] Config guidance requested

Hi Rainer, On 23 February 2011 10:09, Rainer Gerhards wrote: >> -Original Message- >> From: Brett Delle Grazie [mailto:brett.dellegra...@gmail.com] >> Sent: Wednesday, February 23, 2011 11:06 AM >> To: Rainer Gerhards >> Cc: rsyslog-users >> Su