diff options
Diffstat (limited to 'test.conf')
-rw-r--r-- | test.conf | 7 |
1 files changed, 5 insertions, 2 deletions
@@ -15,6 +15,7 @@ # % = \% # \ = \\ # --> '\' is used to escape (as in C) +#$template TraditionalFormat,%timegenerated% %HOSTNAME% %syslogtag%%msg%\n" $template TraditionalFormat,"%timegenerated% %HOSTNAME% %syslogtag%%msg%\n" $template precise,"%syslogpriority%,%syslogfacility%,%timegenerated%,%HOSTNAME%,%syslogtag%,%msg%\n",1024 $template RFC3164fmt,"<%PRI%>%TIMESTAMP% %HOSTNAME% %syslogtag%%msg%" @@ -23,6 +24,9 @@ $template usermsg," XXXX%syslogtag%%msg%\n\r" #$template wallmsg,"\r\n\7Message from syslogd@%HOSTNAME% at %timegenerated% ...\r\n %syslogtag%%msg%\n\r" $template MySQLInsert,"insert iut, message, receivedat values ('%iut%', '%msg:::UPPERCASE%', '%timegenerated:::date-mysql%') into systemevents\r\n", SQL +# the template below emulates winsyslog format, but we need to check the time +# stamps used. for now, it is good enough ;) +$template WinSyslogFmt,"%timegenerated:1:10:date-rfc3339%,%timegenerated:12:19:date-rfc3339%,%timegenerated:1:10:date-rfc3339%,%timegenerated:12:19:date-rfc3339%,%syslogfacility%,%syslogpriority%,%syslogtag%%msg%\n" #$template wallmsg,"\r\n\7Message from syslogd@%HOSTNAME% at %timegenerated:::date-rfc3339% ...\r\n %syslogtag%%msg%\n\r" # Selector lines are now modified @@ -32,10 +36,9 @@ $template MySQLInsert,"insert iut, message, receivedat values ('%iut%', '%msg::: #authpriv.* /var/log/secure,precise *.* rger #*.* *;MySQLInsert -#*.* /home/rger/proj/rsyslog/logfile;precise +*.* /home/rger/proj/rsyslog/logfile;WinSyslogFmt #*.* /home/rger/proj/rsyslog/logfile;UserMsg #*.* /home/rger/proj/rsyslog/tradfile;TraditionalFormat -*.* /home/rger/proj/rsyslog/tradfile #*.* @172.19.2.16;RFC3164fmt #*.* @172.19.2.16 #*.* >localhost,AdisconDB,root, |