Ioan's questions

I am having a problem with rsyslog that is duplicating the logs. I have configured rsyslog to receive logs from remote servers - Windows(installed a service that is converting events to syslog) and Linux. For this purpose I have added the following rows in rsyslog.conf as here:

######################
#### REMOTE RULES ####
######################


if $fromhost-ip == 'xx.xxx.xxx.xxx' then /var/log/RemoteSystems/remote1/remote1.log
&~
#
if $fromhost-ip == 'xx.xxx.xxx.xxy' then /var/log/RemoteSystems/remote2/remote2.log
&~
#
............

I would like to receive the logs only in these files - remote1.log and remote2.log, but some logs are also duplicated in auth.log, syslog, kern.log.

The other 2 conf files under rsyslog.d are default for Ubuntu.

I have a file under logrotate.d that I would like not to run when the main logrotate is running. I have created a separate job for this in /etc/crontab

45 23   * * *   root    mv /var/log/RemoteSystems/*/*.log /var/log/Archiv/ && logrotate /etc/logrotate.d/test  

The job will move the files from a directory to another and then will apply logrotate. I would like that this job to run separately from main logrotate job in /etc/crontab. The problem is that because "test" is under /etc/logrotate.d/, it will run once again with the main logrotate. Is there any command that I can insert in logrotate.conf that can exclude "test" to run? I know that if I am having "test" file out of /etc/logrotate.d, this will not happen, but I would like to keep "test" at the same path.