Is it possible to apply message filters to say, block/not log all message types of `INFO` and `DEBUG` from a specific rule?
For example: Test.conf: ruleset(name="vcsa20525" queue.type="linkedlist" queue.workerThreads="4" queue.workerThreadMinimumMessages="3000"){ action(type="omfile" file="/var/log/remote-syslog/vcsa.log") } input(type="imudp" port="20525" ruleset="vcsa20525") Vcenter is notorious for not allowing syslog filtration or level setting on the appliance or source side. Support basically claims its all or nothing. So the thought was to filter them on the Rsyslog side.. except I’m having no luck finding info or examples for filtering when using rulesets. Thanks! [Jamf] Ben Hart IT Systems Administrator II 100 Washington Ave S, Minneapolis, MN 55401 [Phone] +00 1 989 424 0187 [Email] ben.h...@jamf.com [Web] www.jamf.com<https://www.jamf.com> [Facebook] [Twitter] [LinkedIn] [YouTube]
_______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.