The translation is temporarily closed for contributions due to maintenance, please come back later.
English
_FACILITY_ specifies the subsystem that produces a specific syslog message. For example, the [command]#mail# subsystem handles all mail-related syslog messages. _FACILITY_ can be represented by one of the following keywords (or by a numerical code): [command]#kern# (0), [command]#user# (1), [command]#mail# (2), [command]#daemon# (3), [command]#auth# (4), [command]#syslog# (5), [command]#lpr# (6), [command]#news# (7), [command]#uucp# (8), [command]#cron# (9), [command]#authpriv# (10), [command]#ftp# (11), [command]#ntp# (12), [command]#logaudit# (13), [command]#logalert# (14), [command]#clock# (15), and [command]#local0# through [command]#local7# (16 - 23).
kern.*
cron.!info,!debug
:pass:quotes[_PROPERTY_], [!]pass:quotes[_COMPARE_OPERATION_], "pass:quotes[_STRING_]"
:msg, contains, "error"
:hostname, isequal, "host1"
:msg, !regex, "fatal .* error"
if _EXPRESSION_ then _ACTION_ else _ACTION_
if $programname == 'prog1' then {
action(type="omfile" file="/var/log/prog1.log")
if $msg contains 'test' then
action(type="omfile" file="/var/log/prog1test.log")
else
action(type="omfile" file="/var/log/prog1notest.log")
}
cron.* /var/log/cron.log
_FILTER_ ?_DynamicFile_
@([command]#zpass:attributes[{blank}]_NUMBER_pass:attributes[{blank}]#)_HOST_:pass:attributes[{blank}]_PORT_
The _PORT_ attribute specifies the host machine's port.
$outchannel pass:quotes[_NAME_], pass:quotes[_FILE_NAME_], pass:quotes[_MAX_SIZE_], pass:quotes[_ACTION_]
_FILTER_ :omfile:$pass:attributes[{blank}]_NAME_
$outchannel log_rotation, /var/log/test_log.log, 104857600, /home/joe/log_rotation_script
*.* :omfile:$log_rotation
[application]*rsyslog* can send syslog messages to specific users by specifying a user name of the user you want to send the messages to (as in xref:Viewing_and_Managing_Log_Files.adoc#ex-multiple_actions[Specifying Multiple Actions]). To specify more than one user, separate each user name with a comma (`,`). To send messages to every user that is currently logged on, use an asterisk (`*`).
pass:quotes[_FILTER_] ^pass:quotes[_EXECUTABLE_]; pass:quotes[_TEMPLATE_]
:pass:quotes[_PLUGIN_]:pass:quotes[_DB_HOST_],pass:quotes[_DB_NAME_],pass:quotes[_DB_USER_],pass:quotes[_DB_PASSWORD_];pass:quotes[_TEMPLATE_]