Ok, I figured this out. I probably worded my issue badly but what i was looking for is the following:
#this sets a variable at the entry[#] level defvar syslog /files/etc/syslog.conf/*[ ./action/file = "/var/log/messages"] #these two add in the new selector entries. set $syslog/selector[last() + 1]/facility local6 set $syslog/selector[last() + 1]/facility local7 #Now we put the selector[#] into a new variable defvar syslog_selector1 $syslog/*[./facility = "local6"] defvar syslog_selector2 $syslog/*[./facility = "local7"] #configure the level for the two new entries set $syslog_selector1/level none set $syslog_selector2/level none #stupid bug in syslog.aug rm $syslog/action set $syslog/action/file /var/log/messages #save the changes save The bug, for some reason action and file has to be listed after all the selector entries. I have not checked for an updated syslog.aug this is on centos 5.10. I was able to write an augeas type for this augeas { "syslog_local6none": incl => "/etc/syslog.conf", lens => "Syslog.lns", changes => [ "defvar syslog *[ ./action/file = \"/var/log/messages\" ]", "set \$syslog/selector[last() + 1]/facility local6", "defvar syslog_selector \$syslog/*[ ./facility = \"local6\" ]", "set \$syslog_selector/level none", # "rm \$syslog/action", # "set \$syslog/action/file /var/log/messages", ], } Hopefully this helps someone else as I spent way too much time figuring this out... -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/729f22ba-9908-435a-9da3-c498a412e172%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.