Rsyslog config help
 

Hello, so I have to create a new file "auth-errors.conf" in the rsyslog config files directory, with the rule of facility:authpriv, severity: alert, and write to /var/log/auth-errors . So I know that I need to use the authpriv.alert pair ( I think ), but my confusion is how would I go about this? Config the actual rsyslog config file or create the file and write the rule.. Sorry for the stupid question! Thanks in advance for any help

You create the new file, put in it the new rule, and save it to the directory, /etc/rsyslog.d