Home / server / Questions / 397912
Accepted
Arenstar
Asked: 2012-06-13 05:27:28 +0800 CST

Rsyslog Discarding Unwanted Messages

  • 772

Once again, i found that Rsyslog is not as flexible as i expected...

My application logs to LOCAL5.* ( depending on the severity )

I would like to see on my centralized log server only LOCAL5.WARNING and above

I assumed and tested

local5.info            ~

However this means block LOCAL5.INFO and ABOVE

How do i make it block LOCAL5.INFO and BELOW ???

Suggestions please?

logging syslog rsyslog

1 Answers

  1. Best Answer

    It seems

    if $syslogfacility-text == 'local5' and $syslogseverity >= '5' then ~

    did the trick...

    • 3