I have rules such as:
if $hostname startswith 'd.42ba7373' and $programname == 'app' then /var/log/applog
and don't want to output messages that go into that log to /var/log/syslog as well. Is that possible?
logsrsyslog
I have rules such as:
if $hostname startswith 'd.42ba7373' and $programname == 'app' then /var/log/applog
and don't want to output messages that go into that log to /var/log/syslog as well. Is that possible?
Best Answer
The discard (
~
) action may help.http://www.rsyslog.com/doc/rsyslog_conf_actions.html