Re: Save rsyslog data -

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

On 08/20/2012 11:29 PM, Bob Goodwin - Zuni, Virginia, USA wrote:
>    It doesn't seem to accept double quotes, single still  yields an
>    error message.
>        [bobg@box9 ~]$ cat /var/log/tomato.log
>        Aug 20 11:02:27 box9 rsyslogd: the last error occured in
>        /etc/rsyslog.d/emptyfile.conf, line 3:":source, isequal,
>        '' /var/log/tomato.log" 

Well...  All I can say at this point is....

1.  I don't use :source

2.  I log info from my dlink in a file which is not /var/log/messages and that is what I think you are trying to do.

3.  These work just fine for me....

if $msg contains 'from' then ~   (discard messages which match)
if $msg contains 'D-Link' then /var/log/dlink.log   (log messages containing D-Link in dlink.log)


:msg, contains, "from" ~
:msg, contains, "D-Link" /var/log/dlink.log

So....  Maybe you should post a copy of the entries that are filling up your /var/log/messages file?

Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning. -- Rick Cook, The Wizardry Compiled
users mailing list
To unsubscribe or change subscription options:
Have a question? Ask away:

Photo 4 Less

[Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Find Someone Special]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

Add to Google Powered by Linux