Wildcard support for InputFileName in rsyslog?rsyslog server - Can you split up and organize logs?rsyslog logging same data to multiple filesForwarding logs in nested directories with rsyslogForwarding structured data with rsyslogrsyslog filter on authpriv facility in rsyslog.confHow does one separate log data sent to a remote rsyslog server?Forwarding specific logs rsyslogRsyslog pull tools or strategyrsyslog 8 wildcard stops sendingrsyslog send directory to remote host

How can I fix/modify my tub/shower combo so the water comes out of the showerhead?

Fully-Firstable Anagram Sets

Theorems that impeded progress

Would Slavery Reparations be considered Bills of Attainder and hence Illegal?

What is the word for reserving something for yourself before others do?

In a spin, are both wings stalled?

Is "remove commented out code" correct English?

How do conventional missiles fly?

Will google still index a page if I use a $_SESSION variable?

Alternative to sending password over mail?

Why do I get two different answers for this counting problem?

Does a druid starting with a bow start with no arrows?

How can I prevent hyper evolved versions of regular creatures from wiping out their cousins?

1960's book about a plague that kills all white people

I would say: "You are another teacher", but she is a woman and I am a man

How to draw the figure with four pentagons?

Combinations of multiple lists

How can I make my BBEG immortal short of making them a Lich or Vampire?

Can I ask the recruiters in my resume to put the reason why I am rejected?

Doing something right before you need it - expression for this?

What reasons are there for a Capitalist to oppose a 100% inheritance tax?

How is it possible to have an ability score that is less than 3?

What about the virus in 12 Monkeys?

Took a trip to a parallel universe, need help deciphering



Wildcard support for InputFileName in rsyslog?


rsyslog server - Can you split up and organize logs?rsyslog logging same data to multiple filesForwarding logs in nested directories with rsyslogForwarding structured data with rsyslogrsyslog filter on authpriv facility in rsyslog.confHow does one separate log data sent to a remote rsyslog server?Forwarding specific logs rsyslogRsyslog pull tools or strategyrsyslog 8 wildcard stops sendingrsyslog send directory to remote host






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








5















We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?



Example:




InputFileName: /path/to/logs/*_error.log




Using the above example results in:




9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory




Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?










share|improve this question




























    5















    We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?



    Example:




    InputFileName: /path/to/logs/*_error.log




    Using the above example results in:




    9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory




    Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?










    share|improve this question
























      5












      5








      5








      We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?



      Example:




      InputFileName: /path/to/logs/*_error.log




      Using the above example results in:




      9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory




      Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?










      share|improve this question














      We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?



      Example:




      InputFileName: /path/to/logs/*_error.log




      Using the above example results in:




      9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory




      Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?







      logging log-files syslog rsyslog






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Apr 18 '13 at 21:15









      DanDan

      3421611




      3421611




















          4 Answers
          4






          active

          oldest

          votes


















          1














          Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.






          share|improve this answer























          • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

            – AXE-Labs
            Aug 25 '14 at 19:35


















          7














          As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.






          share|improve this answer






























            0














            Here are some details on what is required:



            http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



            The version will become 8.6.0 stable on December, 2nd 2014.






            share|improve this answer




















            • 1





              Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

              – squillman
              Nov 19 '14 at 18:05


















            0














            In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
            It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



            However, (see also this) the wildcards are not supported in polling mode.






            share|improve this answer










            New contributor




            fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
            Check out our Code of Conduct.




















              Your Answer








              StackExchange.ready(function()
              var channelOptions =
              tags: "".split(" "),
              id: "2"
              ;
              initTagRenderer("".split(" "), "".split(" "), channelOptions);

              StackExchange.using("externalEditor", function()
              // Have to fire editor after snippets, if snippets enabled
              if (StackExchange.settings.snippets.snippetsEnabled)
              StackExchange.using("snippets", function()
              createEditor();
              );

              else
              createEditor();

              );

              function createEditor()
              StackExchange.prepareEditor(
              heartbeatType: 'answer',
              autoActivateHeartbeat: false,
              convertImagesToLinks: true,
              noModals: true,
              showLowRepImageUploadWarning: true,
              reputationToPostImages: 10,
              bindNavPrevention: true,
              postfix: "",
              imageUploader:
              brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
              contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
              allowUrls: true
              ,
              onDemand: true,
              discardSelector: ".discard-answer"
              ,immediatelyShowMarkdownHelp:true
              );



              );













              draft saved

              draft discarded


















              StackExchange.ready(
              function ()
              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f500724%2fwildcard-support-for-inputfilename-in-rsyslog%23new-answer', 'question_page');

              );

              Post as a guest















              Required, but never shown

























              4 Answers
              4






              active

              oldest

              votes








              4 Answers
              4






              active

              oldest

              votes









              active

              oldest

              votes






              active

              oldest

              votes









              1














              Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.






              share|improve this answer























              • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

                – AXE-Labs
                Aug 25 '14 at 19:35















              1














              Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.






              share|improve this answer























              • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

                – AXE-Labs
                Aug 25 '14 at 19:35













              1












              1








              1







              Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.






              share|improve this answer













              Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.







              share|improve this answer












              share|improve this answer



              share|improve this answer










              answered Apr 19 '13 at 2:15









              Tim BrighamTim Brigham

              13.4k75098




              13.4k75098












              • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

                – AXE-Labs
                Aug 25 '14 at 19:35

















              • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

                – AXE-Labs
                Aug 25 '14 at 19:35
















              It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

              – AXE-Labs
              Aug 25 '14 at 19:35





              It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

              – AXE-Labs
              Aug 25 '14 at 19:35













              7














              As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.






              share|improve this answer



























                7














                As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.






                share|improve this answer

























                  7












                  7








                  7







                  As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.






                  share|improve this answer













                  As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.







                  share|improve this answer












                  share|improve this answer



                  share|improve this answer










                  answered Nov 12 '14 at 10:17









                  IanIan

                  7112




                  7112





















                      0














                      Here are some details on what is required:



                      http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



                      The version will become 8.6.0 stable on December, 2nd 2014.






                      share|improve this answer




















                      • 1





                        Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                        – squillman
                        Nov 19 '14 at 18:05















                      0














                      Here are some details on what is required:



                      http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



                      The version will become 8.6.0 stable on December, 2nd 2014.






                      share|improve this answer




















                      • 1





                        Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                        – squillman
                        Nov 19 '14 at 18:05













                      0












                      0








                      0







                      Here are some details on what is required:



                      http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



                      The version will become 8.6.0 stable on December, 2nd 2014.






                      share|improve this answer















                      Here are some details on what is required:



                      http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



                      The version will become 8.6.0 stable on December, 2nd 2014.







                      share|improve this answer














                      share|improve this answer



                      share|improve this answer








                      edited Nov 19 '14 at 18:05









                      squillman

                      35.2k979134




                      35.2k979134










                      answered Nov 19 '14 at 17:58









                      Rainer GerhardsRainer Gerhards

                      1




                      1







                      • 1





                        Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                        – squillman
                        Nov 19 '14 at 18:05












                      • 1





                        Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                        – squillman
                        Nov 19 '14 at 18:05







                      1




                      1





                      Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                      – squillman
                      Nov 19 '14 at 18:05





                      Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                      – squillman
                      Nov 19 '14 at 18:05











                      0














                      In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
                      It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



                      However, (see also this) the wildcards are not supported in polling mode.






                      share|improve this answer










                      New contributor




                      fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                      Check out our Code of Conduct.
























                        0














                        In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
                        It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



                        However, (see also this) the wildcards are not supported in polling mode.






                        share|improve this answer










                        New contributor




                        fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                        Check out our Code of Conduct.






















                          0












                          0








                          0







                          In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
                          It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



                          However, (see also this) the wildcards are not supported in polling mode.






                          share|improve this answer










                          New contributor




                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.










                          In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
                          It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



                          However, (see also this) the wildcards are not supported in polling mode.







                          share|improve this answer










                          New contributor




                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.









                          share|improve this answer



                          share|improve this answer








                          edited 2 days ago





















                          New contributor




                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.









                          answered 2 days ago









                          fytsfyts

                          1013




                          1013




                          New contributor




                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.





                          New contributor





                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.






                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.



























                              draft saved

                              draft discarded
















































                              Thanks for contributing an answer to Server Fault!


                              • Please be sure to answer the question. Provide details and share your research!

                              But avoid


                              • Asking for help, clarification, or responding to other answers.

                              • Making statements based on opinion; back them up with references or personal experience.

                              To learn more, see our tips on writing great answers.




                              draft saved


                              draft discarded














                              StackExchange.ready(
                              function ()
                              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f500724%2fwildcard-support-for-inputfilename-in-rsyslog%23new-answer', 'question_page');

                              );

                              Post as a guest















                              Required, but never shown





















































                              Required, but never shown














                              Required, but never shown












                              Required, but never shown







                              Required, but never shown

































                              Required, but never shown














                              Required, but never shown












                              Required, but never shown







                              Required, but never shown







                              Popular posts from this blog

                              Wikipedia:Vital articles Мазмуну Biography - Өмүр баян Philosophy and psychology - Философия жана психология Religion - Дин Social sciences - Коомдук илимдер Language and literature - Тил жана адабият Science - Илим Technology - Технология Arts and recreation - Искусство жана эс алуу History and geography - Тарых жана география Навигация менюсу

                              Bruxelas-Capital Índice Historia | Composición | Situación lingüística | Clima | Cidades irmandadas | Notas | Véxase tamén | Menú de navegacióneO uso das linguas en Bruxelas e a situación do neerlandés"Rexión de Bruxelas Capital"o orixinalSitio da rexiónPáxina de Bruselas no sitio da Oficina de Promoción Turística de Valonia e BruxelasMapa Interactivo da Rexión de Bruxelas-CapitaleeWorldCat332144929079854441105155190212ID28008674080552-90000 0001 0666 3698n94104302ID540940339365017018237

                              What should I write in an apology letter, since I have decided not to join a company after accepting an offer letterShould I keep looking after accepting a job offer?What should I do when I've been verbally told I would get an offer letter, but still haven't gotten one after 4 weeks?Do I accept an offer from a company that I am not likely to join?New job hasn't confirmed starting date and I want to give current employer as much notice as possibleHow should I address my manager in my resignation letter?HR delayed background verification, now jobless as resignedNo email communication after accepting a formal written offer. How should I phrase the call?What should I do if after receiving a verbal offer letter I am informed that my written job offer is put on hold due to some internal issues?Should I inform the current employer that I am about to resign within 1-2 weeks since I have signed the offer letter and waiting for visa?What company will do, if I send their offer letter to another company