I am redoing a bit my rsyslogging, parsing everthing from mesos and marathon into a mesos.log with:
[@syslog1 rsyslog.d]# cat 10-mesos.conf if ($programname == 'mesos-slave') or ($programname == 'marathon') \ then -/var/log/mesos.log & ~ [@syslog1 rsyslog.d]# cat 00-messages.conf mail.none;authpriv.none;cron.none;*.warning /var/log/messages [root@syslog1 rsyslog.d]# This 00-messages.conf(executed first) should capture the warnings of mesos, but I does not. Everything ends up in /var/log/mesos.log
