On Wed, 9 Feb 2011, Norman Zhang wrote:
I have applied the following template
$template
precise,"%syslogpriority%,%syslogfacility%,%timegenerated::fulltime%,%HOSTNAME%,%syslogtag%,%msg%\n"
if ($syslogseverity <= '6') then ?precise
However my log still shows the default format.
2011-02-09T19:38:10.279495-05:00 10.131.47.4 : 2011 Feb 9 19:38:10 EST:
%RADIUS-3-RADIUS_ERROR_MESSAGE: All RADIUS servers failed to respond after
retries.
2011-02-09T19:38:15.249808-05:00 10.131.47.4 : 2011 Feb 9 19:38:15 EST:
%TACACS-3-TACACS_ERROR_MESSAGE: All servers failed to respond
Can someone please show me how I can achieve "precise"?
*.* /var/log/messages;precise
If I understand what you have defined, you've defined it to log to a file
named (result of template evaluation of precise), not logging to a file
using precise as the format for the log lines.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
