14 Mar
2012
14 Mar
'12
3:22 p.m.
On 03/07/2012 03:52 PM, Gergely Nagy wrote:
Clayton Dukes<cdukes@gmail.com> writes:
Hey all, Seems like it would be simple to exclude the local host, but I can't find anything in the docs. What is the best way to do this?
I suppose the easiest would be to not include the local source in the logpath.
That is, if you have a source s_local { unix-dgram("/dev/log"); }, then don't put that in the logpath where you don't want local logs.
If that's not an option, then you can tag the s_local messages with a tag, and filter on that, perhaps.
If you want to go that way, it's even easier than that, as, quoting the manual:
Every message automatically has the tag of its source in .source.<id_of_the_source_statement> format
greets, Peter