MonitorWare Knowledge Base

Hi,

I am looking to replace syslog-ng with rsyslog on a syslog server. Can anyone tell me whether there are a list of macros available that rsyslog supports? syslog-ng has support for things like $HOST, $HOUR, $PROGRAM etc, in lines like:

/u00/log/$SOURCEIP/$YEAR/$MONTH/$DAY/$YEAR-$MONTH-$DAY.$PROGRAM.$FACILITY.log" group("logview"));

Cheers,

Campbell

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Hi,

this is done with the property replacer in rsyslog. The relevant property doc is here:

http://www.rsyslog.com/doc-property_replacer.html

Rainer