MonitorWare Knowledge Base

Rainer (and everyone),

I know you mentioned that the config syntax may change at some point in the future. I come from syslog-ng and find its way of configuration very logical: define sources, destinations, filters, and throw those together in any kind of combination to customize logging. Is something like that possible now? If not, is it on the radar in the short term?

I am having some trouble wrapping my head around rsyslog config. Maybe a document that gives a high level overview with some examples would be nice.

Thanks!

Christoph

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Rsylog focussed on backwards-compatibility. So it is a totally different system than syslog-ng (at least I think, I have never used syslog-ng). I suggest to have a look at the video tutorials in addition to the written doc.

It is, I understand, and I am getting closer to figuring it out. I just found the "source, filter, destination" setup really logical to work with.

Yeah, no way around it: there is a big price to pay for backward compatibility. I really think that rsyslog's config currently is just plain ugly. The issue just is that it works well enough, and I get far more feature requests than config change requests. Changing the config is a major undertking, but I hope to arrive there at some time

Rainer