ril 03, 2013 2:58 PM
To: rsyslog-users
Subject: Re: [rsyslog] Allocating certain logs to certain files
What I do with splunk is that I have my clients send all the logs up to my
central server, and Splunk server. I then have the rsyslog on the Splunk server
write the logs that I want splunk to in
n...@lists.adiscon.com
> [mailto:rsyslog-boun...@lists.adiscon.com] On Behalf Of Marcelo
> Veglienzone
> Sent: Wednesday, April 03, 2013 12:30 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] Allocating certain logs to certain files
>
> In that case you only need one rule, somethin
yslog-users
Subject: Re: [rsyslog] Allocating certain logs to certain files
In that case you only need one rule, something like this should work
1. if \
2. $source != 'loghost.example.com' \
3. then*.* ?DYNlogfile
On Wed, Apr 3, 2013 at 4:23 PM, Josh Bitto wrote:
O
; > Is there a way for it to NOT log to the /var/log/messages and ONLY to
> > the /var/log/hosts//messages?
> >
> >
> >
> > -Original Message-
> > From: rsyslog-boun...@lists.adiscon.com [mailto:
> > rsyslog-boun...@lists.adiscon.com] On Behalf Of M
sts.adiscon.com
[mailto:rsyslog-boun...@lists.adiscon.com] On Behalf Of Marcelo Veglienzone
Sent: Wednesday, April 03, 2013 2:31 PM
To: rsyslog-users
Subject: Re: [rsyslog] Allocating certain logs to certain files
The config I shared does that
On Apr 3, 2013 6:18 PM, "Josh Bitto" wrote:
> Ma
s.adiscon.com [mailto:
> rsyslog-boun...@lists.adiscon.com] On Behalf Of Marcelo Veglienzone
> Sent: Wednesday, April 03, 2013 12:30 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] Allocating certain logs to certain files
>
> In that case you only need one rule, something like this
: Re: [rsyslog] Allocating certain logs to certain files
In that case you only need one rule, something like this should work
1. if \
2. $source != 'loghost.example.com' \
3. then*.* ?DYNlogfile
On Wed, Apr 3, 2013 at 4:23 PM, Josh Bitto wrote:
> Oh ok th
, April 03, 2013 1:56 PM
To: rsyslog-users
Subject: Re: [rsyslog] Allocating certain logs to certain files
I found this reference helpful:
http://en.wikipedia.org/wiki/Syslog
On Wed, Apr 3, 2013 at 4:02 PM, Rainer Gerhards wrote:
> I suggest
>
> http://www.monitorware.com/en/topi
gt; Ursprüngliche Nachricht
> Von: Josh Bitto
> Datum: 03.04.2013 21:49 (GMT+01:00)
> An: rsyslog-users
> Betreff: Re: [rsyslog] Allocating certain logs to certain files
>
>
> Okie dokie
>
> Would these if then statements work for windows events?
>
>
I suggest
http://www.monitorware.com/en/topics/syslog/
Especially the seminar.
Sent from phone, thus brief.
Ursprüngliche Nachricht
Von: Josh Bitto
Datum: 03.04.2013 21:49 (GMT+01:00)
An: rsyslog-users
Betreff: Re: [rsyslog] Allocating certain logs to certain files
linux not so much.
-Original Message-
From: rsyslog-boun...@lists.adiscon.com
[mailto:rsyslog-boun...@lists.adiscon.com] On Behalf Of Marcelo Veglienzone
Sent: Wednesday, April 03, 2013 12:30 PM
To: rsyslog-users
Subject: Re: [rsyslog] Allocating certain logs to certain files
In that case
.com [mailto:
> rsyslog-boun...@lists.adiscon.com] On Behalf Of Marcelo Veglienzone
> Sent: Wednesday, April 03, 2013 12:07 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] Allocating certain logs to certain files
>
> loghost is the name of the machine doing the central
.@lists.adiscon.com] On Behalf Of Marcelo Veglienzone
Sent: Wednesday, April 03, 2013 12:07 PM
To: rsyslog-users
Subject: Re: [rsyslog] Allocating certain logs to certain files
loghost is the name of the machine doing the central logging with rsyslog which
I want to keep it's logs under the default lo
t; From: rsyslog-boun...@lists.adiscon.com [mailto:
> rsyslog-boun...@lists.adiscon.com] On Behalf Of Marcelo Veglienzone
> Sent: Wednesday, April 03, 2013 11:47 AM
> To: rsyslog-users
> Subject: Re: [rsyslog] Allocating certain logs to certain files
>
> Josh,
>
> This is what
sts.adiscon.com
[mailto:rsyslog-boun...@lists.adiscon.com] On Behalf Of Marcelo Veglienzone
Sent: Wednesday, April 03, 2013 11:47 AM
To: rsyslog-users
Subject: Re: [rsyslog] Allocating certain logs to certain files
Josh,
This is what I'm currently using, http://pastebin.com/tsTHdsZY Starting at l
Josh,
This is what I'm currently using, http://pastebin.com/tsTHdsZY
Starting at line 116 you'll find what you want
On Wed, Apr 3, 2013 at 3:38 PM, Josh Bitto wrote:
> Ok here is my issue...on my cental rsyslog server I have in my config file
> the following
>
> # This one is the template
Ok here is my issue...on my cental rsyslog server I have in my config file the
following
# This one is the template to generate the log filename dynamically, depending
on the client's IP address.
$template FILENAME,"/var/log/%fromhost-ip%/syslog.log"
# Log all messages to the dynamically fo
17 matches
Mail list logo