Wildcard support for InputFileName in rsyslog?rsyslog server - Can you split up and organize logs?rsyslog logging same data to multiple filesForwarding logs in nested directories with rsyslogForwarding structured data with rsyslogrsyslog filter on authpriv facility in rsyslog.confHow does one separate log data sent to a remote rsyslog server?Forwarding specific logs rsyslogRsyslog pull tools or strategyrsyslog 8 wildcard stops sendingrsyslog send directory to remote host
How can I fix/modify my tub/shower combo so the water comes out of the showerhead?
Fully-Firstable Anagram Sets
Theorems that impeded progress
Would Slavery Reparations be considered Bills of Attainder and hence Illegal?
What is the word for reserving something for yourself before others do?
In a spin, are both wings stalled?
Is "remove commented out code" correct English?
How do conventional missiles fly?
Will google still index a page if I use a $_SESSION variable?
Alternative to sending password over mail?
Why do I get two different answers for this counting problem?
Does a druid starting with a bow start with no arrows?
How can I prevent hyper evolved versions of regular creatures from wiping out their cousins?
1960's book about a plague that kills all white people
I would say: "You are another teacher", but she is a woman and I am a man
How to draw the figure with four pentagons?
Combinations of multiple lists
How can I make my BBEG immortal short of making them a Lich or Vampire?
Can I ask the recruiters in my resume to put the reason why I am rejected?
Doing something right before you need it - expression for this?
What reasons are there for a Capitalist to oppose a 100% inheritance tax?
How is it possible to have an ability score that is less than 3?
What about the virus in 12 Monkeys?
Took a trip to a parallel universe, need help deciphering
Wildcard support for InputFileName in rsyslog?
rsyslog server - Can you split up and organize logs?rsyslog logging same data to multiple filesForwarding logs in nested directories with rsyslogForwarding structured data with rsyslogrsyslog filter on authpriv facility in rsyslog.confHow does one separate log data sent to a remote rsyslog server?Forwarding specific logs rsyslogRsyslog pull tools or strategyrsyslog 8 wildcard stops sendingrsyslog send directory to remote host
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?
Example:
InputFileName: /path/to/logs/*_error.log
Using the above example results in:
9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory
Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?
logging log-files syslog rsyslog
asked Apr 18 '13 at 21:15
DanDan
3421611
add a comment |
We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?
Example:
InputFileName: /path/to/logs/*_error.log
Using the above example results in:
9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory
Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?
logging log-files syslog rsyslog
asked Apr 18 '13 at 21:15
DanDan
3421611
add a comment |
We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?
Example:
InputFileName: /path/to/logs/*_error.log
Using the above example results in:
9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory
Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?
logging log-files syslog rsyslog
asked Apr 18 '13 at 21:15
DanDan
3421611
We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?
Example:
InputFileName: /path/to/logs/*_error.log
Using the above example results in:
9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory
Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?
logging log-files syslog rsyslog
logging log-files syslog rsyslog
asked Apr 18 '13 at 21:15
DanDan
3421611
asked Apr 18 '13 at 21:15
DanDan
3421611
asked Apr 18 '13 at 21:15
DanDan
3421611
asked Apr 18 '13 at 21:15
DanDan
3421611
asked Apr 18 '13 at 21:15
DanDan
3421611
3421611
add a comment |
add a comment |
4 Answers
4
active
oldest
votes
Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.
answered Apr 19 '13 at 2:15
Tim BrighamTim Brigham
13.4k75098
It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…
– AXE-Labs
Aug 25 '14 at 19:35
add a comment |
As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.
answered Nov 12 '14 at 10:17
IanIan
7112
add a comment |
Here are some details on what is required:
http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile
The version will become 8.6.0 stable on December, 2nd 2014.
edited Nov 19 '14 at 18:05
squillman
35.2k979134
answered Nov 19 '14 at 17:58
Rainer GerhardsRainer Gerhards
1
1
Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.
– squillman
Nov 19 '14 at 18:05
add a comment |
In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).
However, (see also this) the wildcards are not supported in polling mode.
answered 2 days ago
fytsfyts
1013
New contributor
fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f500724%2fwildcard-support-for-inputfilename-in-rsyslog%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
4 Answers
4
active
oldest
votes
4 Answers
4
active
oldest
votes
active
oldest
votes
active
oldest
votes
Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.
answered Apr 19 '13 at 2:15
Tim BrighamTim Brigham
13.4k75098
It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…
– AXE-Labs
Aug 25 '14 at 19:35
add a comment |
Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.
answered Apr 19 '13 at 2:15
Tim BrighamTim Brigham
13.4k75098
It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…
– AXE-Labs
Aug 25 '14 at 19:35
add a comment |
Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.
answered Apr 19 '13 at 2:15
Tim BrighamTim Brigham
13.4k75098
Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.
answered Apr 19 '13 at 2:15
Tim BrighamTim Brigham
13.4k75098
answered Apr 19 '13 at 2:15
Tim BrighamTim Brigham
13.4k75098
answered Apr 19 '13 at 2:15
Tim BrighamTim Brigham
13.4k75098
answered Apr 19 '13 at 2:15
Tim BrighamTim Brigham
13.4k75098
13.4k75098
It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…
– AXE-Labs
Aug 25 '14 at 19:35
add a comment |
It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…
– AXE-Labs
Aug 25 '14 at 19:35
It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…
– AXE-Labs
Aug 25 '14 at 19:35
It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…
– AXE-Labs
Aug 25 '14 at 19:35
add a comment |
As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.
answered Nov 12 '14 at 10:17
IanIan
7112
add a comment |
As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.
answered Nov 12 '14 at 10:17
IanIan
7112
add a comment |
As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.
answered Nov 12 '14 at 10:17
IanIan
7112
As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.
answered Nov 12 '14 at 10:17
IanIan
7112
answered Nov 12 '14 at 10:17
IanIan
7112
answered Nov 12 '14 at 10:17
IanIan
7112
answered Nov 12 '14 at 10:17
IanIan
7112
7112
add a comment |
add a comment |
Here are some details on what is required:
http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile
The version will become 8.6.0 stable on December, 2nd 2014.
edited Nov 19 '14 at 18:05
squillman
35.2k979134
answered Nov 19 '14 at 17:58
Rainer GerhardsRainer Gerhards
1
1
Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.
– squillman
Nov 19 '14 at 18:05
add a comment |
Here are some details on what is required:
http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile
The version will become 8.6.0 stable on December, 2nd 2014.
edited Nov 19 '14 at 18:05
squillman
35.2k979134
answered Nov 19 '14 at 17:58
Rainer GerhardsRainer Gerhards
1
1
Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.
– squillman
Nov 19 '14 at 18:05
add a comment |
Here are some details on what is required:
http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile
The version will become 8.6.0 stable on December, 2nd 2014.
edited Nov 19 '14 at 18:05
squillman
35.2k979134
answered Nov 19 '14 at 17:58
Rainer GerhardsRainer Gerhards
1
Here are some details on what is required:
http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile
The version will become 8.6.0 stable on December, 2nd 2014.
edited Nov 19 '14 at 18:05
squillman
35.2k979134
answered Nov 19 '14 at 17:58
Rainer GerhardsRainer Gerhards
1
edited Nov 19 '14 at 18:05
squillman
35.2k979134
edited Nov 19 '14 at 18:05
squillman
35.2k979134
edited Nov 19 '14 at 18:05
squillman
35.2k979134
35.2k979134
answered Nov 19 '14 at 17:58
Rainer GerhardsRainer Gerhards
1
answered Nov 19 '14 at 17:58
Rainer GerhardsRainer Gerhards
1
answered Nov 19 '14 at 17:58
Rainer GerhardsRainer Gerhards
1
1
1
Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.
– squillman
Nov 19 '14 at 18:05
add a comment |
1
Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.
– squillman
Nov 19 '14 at 18:05
1
1
Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.
– squillman
Nov 19 '14 at 18:05
Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.
– squillman
Nov 19 '14 at 18:05
add a comment |
In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).
However, (see also this) the wildcards are not supported in polling mode.
answered 2 days ago
fytsfyts
1013
New contributor
fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).
However, (see also this) the wildcards are not supported in polling mode.
answered 2 days ago
fytsfyts
1013
New contributor
fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).
However, (see also this) the wildcards are not supported in polling mode.
answered 2 days ago
fytsfyts
1013
New contributor
fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).
However, (see also this) the wildcards are not supported in polling mode.
answered 2 days ago
fytsfyts
1013
New contributor
fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 2 days ago
answered 2 days ago
fytsfyts
1013
New contributor
fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered 2 days ago
fytsfyts
1013
answered 2 days ago
fytsfyts
1013
1013
New contributor
fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f500724%2fwildcard-support-for-inputfilename-in-rsyslog%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
