Gerrard.Geldenhuis at worldpay
Aug 7, 2012, 7:46 AM
Post #1 of 1
(145 views)
Permalink
|
|
multiple pointers to logserver only honours the first one.
|
|
Hi
I am using Oracle Linux 5.8 with rsyslog 2.33.1-7.el5
I know this is ancient and not supported anymore and likely the cause of
many miseries but this what I have to work with atm.
I have multiple entries for remote logging, however only the first
entry, the entry fo authpriv.notice is being honoured. kern.* is not
being logged to the remote server. Is this a bug fixed later or a
misconfiguration on my side?
Config file minus comments:
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$ModLoad imklog
$ModLoad imuxsock
$WorkDirectory /var/lib/rsyslog # Default locaction for spool
files
$ActionQueueType LinkedList # Use asynchronous processing
$ActionQueueFileName remoteservercache # Sets cache file name and
enables disk mode
$ActionResumeRetryCount -1 # infinite retries on insert
failure
$ActionQueueSaveOnShutdown on # Save in-memory data if rsyslog
shuts down
*.info;mail.none;authpriv.none;cron.none
/var/log/messages
authpriv.notice @@logserver:514
authpriv.* /var/log/secure
mail.*
-/var/log/maillog
cron.* /var/log/cron
*.emerg *
uucp,news.crit /var/log/spooler
local7.*
/var/log/boot.log
kern.* @@logserver:514
& /var/log/iptables.log
Regards
Gerrard Geldenhuis | IT Operations |WorldPay
M +44 772 448 7979
gerrard.geldenhuis [at] worldpay
|
