MonitorWare Knowledge Base

First post, hope I don't look daft....

Just getting into Rsyslog (version 3.18.3), so forgive me if this is obvious.

This works:

Code: Select all

:hostname, !isequal, "HCUKMCUX76" :omrelp:HCUKMCUX76:2514;RSYSLOG_ForwardFormat

This doesn't work quite the same...

Code: Select all

$template TClusterPartnerRELP, :omrelp:HCUKMCUX76:2514;RSYSLOG_ForwardFormat
:hostname, !isequal, "HCUKMCUX76" ?TClusterPartnerRELP

The first one sends messages to a destination server if the message hostname does not equal HCUKMCUX76 ( Don't ask why, another issue all together)... And that works.

The seconds should do the same (assuming I understand templates), however, it creates a log file ":omrelp:HCUKMCUX76:2514;RSYSLOG_ForwardFormat" and pops the messages in there rather than processing the omrelp line.

Have I missed something?

Phil.

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?