Depends on what you are trying to achieve:
:msg, contains, "some string" stop
(on one line) will discard any message containing "some string".
:msg, contains, "some other string" /var/log/messages
& stop
(across two lines) will cause any message containing "some other
string" to be logged in me
Or use syslog-ng :) Rainer's ideas about the syntax and documentation is
quite interesting :)
L
I have a bunch of lines like this in
/etc/rsyslog.d/systemd-drivel.conf:
:msg, contains, "Activating via systemd" ~
:msg, contains, "Activation via systemd failed" ~
Every time I boot, rsyslogd compla
On Sun, Aug 9, 2015 at 7:11 PM, Tom Horsley wrote:
>
> I have a bunch of lines like this in
> /etc/rsyslog.d/systemd-drivel.conf:
>
> :msg, contains, "Activating via systemd" ~
> :msg, contains, "Activation via systemd failed" ~
>
> Every time I boot, rsyslogd complains about
> the deprecated synt
On Sun, 09 Aug 2015 16:44:51 -0700
Doug H. wrote:
> > So basically I replace the ~ with & stop ?
>
> I don't remember why I put it on the second line but I suspect I found
> something via google.
Well, when I try it, rsyslogd won't start, so it hates
something about my file.
I guess I'll stic
On Sun, 2015-08-09 at 19:36 -0400, Tom Horsley wrote:
> On Sun, 09 Aug 2015 16:28:16 -0700
> Doug H. wrote:
>
> > :fromhost-ip, isequal, "192.168.10.1" /var/log/pace.log
> > & stop
>
> So basically I replace the ~ with & stop ?
I don't remember why I put it on the second line but I suspect I fo
On Sun, 09 Aug 2015 16:28:16 -0700
Doug H. wrote:
> :fromhost-ip, isequal, "192.168.10.1" /var/log/pace.log
> & stop
So basically I replace the ~ with & stop ?
Is it really on the 2nd line or did the email line wrap? :-).
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or ch
On Sun, 2015-08-09 at 19:11 -0400, Tom Horsley wrote:
> I have a bunch of lines like this in
> /etc/rsyslog.d/systemd-drivel.conf:
>
> :msg, contains, "Activating via systemd" ~
> :msg, contains, "Activation via systemd failed" ~
>
> Every time I boot, rsyslogd complains about
> the deprecated sy
I have a bunch of lines like this in
/etc/rsyslog.d/systemd-drivel.conf:
:msg, contains, "Activating via systemd" ~
:msg, contains, "Activation via systemd failed" ~
Every time I boot, rsyslogd complains about
the deprecated syntax:
Aug 9 18:39:21 zooty rsyslogd-2307: warning: ~ action is depre
