MonitorWare Knowledge Base

I have spent hours if not days reading the how-to's and documents concerning rsyslog.conf and
I cannot for the life of me get a simple filter to work.

I have a router called 'walrus' that sends a log file to my system.
The data arrives and it all appears in the /var/log/messages file.
That was easy -- but I want it in its own log file ie /var/log/walrus.log.

this is one of the variations I have tried.

$template walrus, "%HOSTNAME=walrus::%, /var/log/walrus.log"
:msg, contains, "walrus" -/var/log/walrus.log

The above does not give an error in /var/log/messages when I restart
rsyslog but walrus.log is not created and the data keeps going to messages.

Can someone please point out where I am going wrong.
rsyslog version is swVersion="3.21.10" running on Fedora10

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Please see here:

syslog-filters-and-destinations-under-rsyslog-t9858.html#p17049

Thanks
this worked as required :

fromhost-ip, isequal, "1.2.3.4" /var/log/Walrus.log
& ~

The 1.2.3.4 is the ip address of my router.

The line was placed ahead of the default rules in /etc/rsyslog.conf.

How do you hook up a router to the computer? What comes with a router? What is the difference between a wireless router and regular router?