Levi Wilbert wrote:
Correction: I mean to say I'm figuring out how to best configure the dynacache
settings on each of the omfile outputs, but as with the queue, I'm uncertain
how to set this up without creating an action() for each logfile that is
written for each host, i.e. messages, secure, mail, etc.
ahh, yes, that can't be done as a ruleset.
what you can do is have some logic to define what file the log will go into
*.mail set $.filename=mail;
and then have one dynafile template that includes the hostname and the filename
as variables.
that way you replace all the separate outputs with one action() statement
There are $foo options for setting the dynafile cache, but you would need to do
that before each of the legacy actions
but as I said in the other message, I normally don't split the logs between so
many files unless I've got other tools consuming the files. I spend more time
figuring which file the log could be in than I do waiting for a grep to go
through the combined file :-) Also, I've had too many times when I need to
correlate log events that were put in separate files, it's just so much easier
for me to deal with when they are all in one file
David Lang
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
