On Thu, 2020-08-20 at 12:11 -0600, James Lay via rsyslog wrote: > So...I thought I had a lock on this, but apparently I don't. My > situation is: A syslog server at site A, a syslog server at site B. > Site A IP is 192.168.1.1, site B is 192.168.1.2, and using gslb IP > 192.168.1.3, one will get a syslog message (not both at the same time). > So....how do I synchronize the messages from A to B, or from B to A if > they are unique messages? > > I attempted the below: > > :hostname, !isequal, "192.168.1.1" @@192.168.1.2 > > but this failed miserably. Any way I can get these to work like I'm > thinking? Thank you! > > James > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. >
Solved with: if $fromhost-ip != "192.168.1.2" then @@192.168.1.2 James _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

