hello, Is it possible to setup up a filter match based on variables for date? example thinking... filter f_date { match($YEAR-$MONTH-$DAY.*); }; #log the files log { source (s_udp); filter(f_date); destination(messages); }; # set it up destination hosts { file("/syslog/NT-SYSLOG/HOSTS/$HOST/$MONTH-$DAY-$YEAR" owner(root) group(root) perm(0644) dir_perm(0755) create_dirs(yes) ); };
On Mon, 12 Sep 2005 12:59:04 MDT, scarter@micron.com said:
filter f_date { match($YEAR-$MONTH-$DAY.*); };
The only way this can do anything "interesting" is if you have machines in another timezone where it's already tomorrow or still yesterday, or if a box has a wrong time set ;)
destination hosts { file("/syslog/NT-SYSLOG/HOSTS/$HOST/$MONTH-$DAY-$YEAR" owner(root) group(root) perm(0644) dir_perm(0755)
This will auto-roll to a new file as needed, because $DAY will change.
participants (2)
-
scarter＠micron.com
-
Valdis.Kletnieks＠vt.edu