Steve Handy
12/15/2022, 10:48 PMSteve Handy
12/15/2022, 10:49 PMSteve Handy
12/15/2022, 10:49 PMSteve Handy
12/15/2022, 10:50 PMSteve Handy
12/15/2022, 11:07 PMSteve Handy
12/15/2022, 11:09 PMSteve Handy
12/15/2022, 11:17 PMqwerty126
12/15/2022, 11:48 PMSlackbot
12/16/2022, 12:38 AMnatemccurdy
12/16/2022, 12:47 AMnatemccurdy
12/16/2022, 12:50 AMnatemccurdy
12/16/2022, 1:00 AMqwerty126
12/16/2022, 2:12 AMqwerty126
12/16/2022, 2:12 AMYury Bushmelev
12/16/2022, 4:59 AM# Handle messages as specified.
if $programname == 'ucarp' then {
action(type="omfile" file="/var/log/ucarp.log")
# Send messages to the configured remote via TCP.
action(type="omfwd" target="127.0.0.1" port="11514")
stop
}
This way you don’t need those “&” at all. This syntax is more-or-less available in any rsyslog 8.x (and even in some latest 7.x IIRC).Yury Bushmelev
12/16/2022, 5:02 AMif $syslogfacility-text =='local5' then {
# Write it to the local file
action(type="omfile" file="/var/log/ucarp.log")
# Send it to the specified target via the specified proto
action(type="omfwd" target="127.0.0.1" port="11514" protocol="tcp")
# Drop it here
stop
}
This way you don’t need those “&” at all. This syntax is more-or-less available in any rsyslog 8.x (and even in some latest 7.x IIRC).Yury Bushmelev
12/16/2022, 5:05 AMif $syslogfacility-text =='local5' then {
# Write it to the local file
action(type="omfile" file="/var/log/local5.log")
# Send it to the specified target via the specified proto
action(type="omfwd" target="127.0.0.1" port="11514" protocol="tcp")
# Drop it here
stop
}
This way you don’t need those “&” at all. This syntax is more-or-less available in any rsyslog 8.x (and even in some latest 7.x IIRC).Yury Bushmelev
12/16/2022, 5:15 AMSlackbot
12/16/2022, 5:17 PMWilliam Myers
12/16/2022, 8:06 PMWilliam Myers
12/16/2022, 8:06 PMWilliam Myers
12/16/2022, 8:06 PMYorokobi
12/16/2022, 8:11 PMWilliam Myers
12/16/2022, 8:12 PMSteve Handy
12/16/2022, 11:06 PMSlackbot
12/16/2022, 11:12 PMYury Bushmelev
12/17/2022, 4:22 AMYury Bushmelev
12/17/2022, 4:33 AMfile { '/tmp/packages.txt': content => $facts['software'] }Yury Bushmelev
12/17/2022, 4:33 AMfile { '/tmp/packages.txt': content => $facts.get('software') }