Hey all, Seems like it would be simple to exclude the local host, but I can't find anything in the docs. What is the best way to do this? ______________________________________________________________ Clayton Dukes ______________________________________________________________
Clayton Dukes <cdukes@gmail.com> writes:
Hey all, Seems like it would be simple to exclude the local host, but I can't find anything in the docs. What is the best way to do this?
I suppose the easiest would be to not include the local source in the logpath. That is, if you have a source s_local { unix-dgram("/dev/log"); }, then don't put that in the logpath where you don't want local logs. If that's not an option, then you can tag the s_local messages with a tag, and filter on that, perhaps. -- |8]
On 03/07/2012 03:52 PM, Gergely Nagy wrote:
Clayton Dukes<cdukes@gmail.com> writes:
Hey all, Seems like it would be simple to exclude the local host, but I can't find anything in the docs. What is the best way to do this?
I suppose the easiest would be to not include the local source in the logpath.
That is, if you have a source s_local { unix-dgram("/dev/log"); }, then don't put that in the logpath where you don't want local logs.
If that's not an option, then you can tag the s_local messages with a tag, and filter on that, perhaps.
If you want to go that way, it's even easier than that, as, quoting the manual:
Every message automatically has the tag of its source in .source.<id_of_the_source_statement> format
greets, Peter
participants (3)
-
Clayton Dukes
-
Gergely Nagy
-
Peter Gyongyosi