you can use any filter before the action, e.g. local7.* action(...)
A config change requires a restart. There are good reasons for it. Could be changed, but would be very much work (for which nobody has time). HTH, if not pls ask again. Rainer El mié., 30 oct. 2019 a las 12:05, sch via rsyslog (<[email protected]>) escribió: > > Hi, > I would like to ask you about few things: > > 1. Config > I got something like this on client: > > module(load="imuxsock") # provides support for local system logging > module(load="imklog") > > global( > DefaultNetstreamDriver="ossl" > DefaultNetstreamDriverCAFile="/tmp/certs/ca.pem" > DefaultNetstreamDriverCertFile="/tmp/certs/cert.pem" > DefaultNetstreamDriverKeyFile="/tmp/certs/key.pem" > ) > > $template TraditionalFormat,"%timegenerated% %HOSTNAME% > %syslogtag%%syslogpriority-text%%msg:::drop-last-lf%\n" > $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat > $RepeatedMsgReduction on > > action( > template="TraditionalFormat" > type="omfwd" > Target="192.168.1.10" > Protocol="tcp" > Port="6514" > StreamDriver="ossl" > StreamDriverMode="1" > StreamDriverAuthMode="x509/certvalid" > ) > > Remote loging is working but I would like to define log level of sending > logs to server. > Ex. I want to my client send only error messages. > What should I add to this config? > > > 2. Is any possibility to change log level or remote target without restart > whole rsyslog service? > > > > -- > Sent from: http://rsyslog-users.1305293.n2.nabble.com/ > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

