LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   tweaking rsyslog (https://www.linuxquestions.org/questions/linux-server-73/tweaking-rsyslog-4175415728/)

chris@momentfeed.com 07-09-2012 12:01 PM

tweaking rsyslog
 
I setup rsyslog to forward to graylog server.

Now I realize that logs are rotating, and the file names are changing...

can I get a little advice on how to have logs rotate, and work with rsyslog.conf / graylog2 ?


$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

# File Sync
FileEnableSync on

#### RULES ####

# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.* /dev/console


$ModLoad imfile
$InputFileName /var/log/mongo/mongod.*
$InputFileTag mongo:
$InputFileStateFile mongo-log
#$InputFileSeverity error
$InputRunFileMonitor
$InputFilePollInterval 1

#if $msg contains 'error' then @10.171.70.89:514
*.* @10.171.70.89:514




$IncludeConfig /etc/rsyslog.d/*.conf

EricTRA 07-10-2012 12:58 AM

Hello,

You've marked your thread as solved. Could you please tell us what you've found as a solution so that others in a similar situation can see if it works for them too? Thanks in advance. Off the Zero Reply List.

Kind regards,

Eric

chris@momentfeed.com 07-10-2012 09:10 AM

metrics?
 
That's all you're interested in is getting this post off the zero replies list? I'm not sure why, but no one really ever responds to my posts.

EricTRA 07-11-2012 12:44 AM

Hi,

It's not at all the only thing I'm interested in but since you yourself marked your thread as solved there's no reason in keeping it in the Zero Reply List. How am I supposed to know that you never received an answer to your question or solution to your problem. When you mark a thread as solved that's just what it means. It indicates that you have found a solution yourself (or somebody outside LQ helped you solve it). That's also why I asked you for the solution you've found so that it might be useful to others.

If you never received an answer/solution to your problem then don't mark your thread as solved!

Kind regards,

Eric


All times are GMT -5. The time now is 08:06 PM.