odd log filename - run-parts(.log

This is the place for you, if you got rsyslog up and running but wonder how to make it do what you want.

Moderator: rgerhards

Google Ads

odd log filename - run-parts(.log

Postby buran980 » Wed Aug 09, 2017 8:32 am


Daily cron jobs file has strange name "20170809-run-parts(.log" (on central logging server) . Anyway for this to be corrected, the "(" part in filename?

Central log server:
version: rsyslog-7.4.7-16.el7.x86_64 (as well as the servers im collecting from)
os: Centos 7.2

Code: Select all
$ModLoad imuxsock
$IMUXSockRateLimitInterval 0
$ModLoad imjournal
$ModLoad imtcp
$InputTCPServerRun 514
$WorkDirectory /var/lib/rsyslog
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
$IncludeConfig /etc/rsyslog.d/*.conf
$OmitLocalLogging on
$IMJournalStateFile imjournal.state
$AllowedSender TCP,,,
$template RemoteLogs,"/var/log/remote-logs/%HOSTNAME%/%$YEAR%-%$MONTH%/%$YEAR%%$MONTH%%$DAY%-%PROGRAMNAME%.log"
$template LocalLogs,"/var/log/remote-logs/local/%$YEAR%-%$MONTH%/%$YEAR%%$MONTH%%$DAY%-%PROGRAMNAME%.log"
if $fromhost-ip == '' then -?LocalLogs
if $fromhost-ip != '' then -?RemoteLogs
user.*                                                  /var/log/user
*.notice;mail.none;authpriv.none;cron.none              /var/log/messages
authpriv.*                                              /var/log/secure
mail.*                                                  -/var/log/maillog
cron.*                                                  /var/log/cron
*.emerg                                               :omusrmsg:*
uucp,news.crit                                    /var/log/spooler
local7.*                                                /var/log/boot
& stop
Posts: 3
Joined: Mon Jun 13, 2016 11:04 am

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Google Ads

Return to Configuration

Who is online

Users browsing this forum: No registered users and 0 guests