CODEWITHSUNDEEP
templatessyslogrsyslog
leopold
leopold

Reputation: 23

Rsyslog Template - Save to file with only message

Trying to create an RSYSLOG template which does two things:

I have found examples of how to do each individually:

Saving to hostname file:
$template sampleTemplate2, "/var/log/%HOSTNAME%.log"

Saving with syslog content only:
$template sampleTemplate,"%msg%\n"
*.* /var/log/test.log;sampleTemplate

However, trying to do the below fails:

$template sampleTemplate,""%msg%\n"
*.* /var/log/%hostname%.log;sampleTemplate

Upvotes: 1

Views: 1586

Answers (1)

Javad Rezaei
Javad Rezaei

Reputation: 1110

You must define dynamic log file name in template and then use template for this purpose. You must use a question mark prefix (?) for template.

$template sampleTemplate2, "/var/log/%HOSTNAME%.log"
$template sampleTemplate,"%msg%\n"
*.* ?sampleTemplate2;sampleTemplate

reference for dynamic file usage

Upvotes: 3

Related Questions