Wildcard support for InputFileName in rsyslog?rsyslog server - Can you split up and organize logs?rsyslog logging same data to multiple filesForwarding logs in nested directories with rsyslogForwarding structured data with rsyslogrsyslog filter on authpriv facility in rsyslog.confHow does one separate log data sent to a remote rsyslog server?Forwarding specific logs rsyslogRsyslog pull tools or strategyrsyslog 8 wildcard stops sendingrsyslog send directory to remote host

How can I fix/modify my tub/shower combo so the water comes out of the showerhead?

Fully-Firstable Anagram Sets

Theorems that impeded progress

Would Slavery Reparations be considered Bills of Attainder and hence Illegal?

What is the word for reserving something for yourself before others do?

In a spin, are both wings stalled?

Is "remove commented out code" correct English?

How do conventional missiles fly?

Will google still index a page if I use a $_SESSION variable?

Alternative to sending password over mail?

Why do I get two different answers for this counting problem?

Does a druid starting with a bow start with no arrows?

How can I prevent hyper evolved versions of regular creatures from wiping out their cousins?

1960's book about a plague that kills all white people

I would say: "You are another teacher", but she is a woman and I am a man

How to draw the figure with four pentagons?

Combinations of multiple lists

How can I make my BBEG immortal short of making them a Lich or Vampire?

Can I ask the recruiters in my resume to put the reason why I am rejected?

Doing something right before you need it - expression for this?

What reasons are there for a Capitalist to oppose a 100% inheritance tax?

How is it possible to have an ability score that is less than 3?

What about the virus in 12 Monkeys?

Took a trip to a parallel universe, need help deciphering



Wildcard support for InputFileName in rsyslog?


rsyslog server - Can you split up and organize logs?rsyslog logging same data to multiple filesForwarding logs in nested directories with rsyslogForwarding structured data with rsyslogrsyslog filter on authpriv facility in rsyslog.confHow does one separate log data sent to a remote rsyslog server?Forwarding specific logs rsyslogRsyslog pull tools or strategyrsyslog 8 wildcard stops sendingrsyslog send directory to remote host






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








5















We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?



Example:




InputFileName: /path/to/logs/*_error.log




Using the above example results in:




9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory




Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?










share|improve this question




























    5















    We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?



    Example:




    InputFileName: /path/to/logs/*_error.log




    Using the above example results in:




    9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory




    Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?










    share|improve this question
























      5












      5








      5








      We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?



      Example:




      InputFileName: /path/to/logs/*_error.log




      Using the above example results in:




      9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory




      Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?










      share|improve this question














      We have log files with names that match a certain pattern but frequently change. Is there a way to specify a wildcard or pattern for rsyslog to include via InputFileName?



      Example:




      InputFileName: /path/to/logs/*_error.log




      Using the above example results in:




      9351.070404487:7fd07e9be700: strm 0x7fd070004260: open error 2, file '/path/to/logs/*_error.log': No such file or directory




      Is there a way to specify a pattern of files for rsyslog to include so that all log files that match a pattern will be included?







      logging log-files syslog rsyslog






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Apr 18 '13 at 21:15









      DanDan

      3421611




      3421611




















          4 Answers
          4






          active

          oldest

          votes


















          1














          Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.






          share|improve this answer























          • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

            – AXE-Labs
            Aug 25 '14 at 19:35


















          7














          As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.






          share|improve this answer






























            0














            Here are some details on what is required:



            http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



            The version will become 8.6.0 stable on December, 2nd 2014.






            share|improve this answer




















            • 1





              Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

              – squillman
              Nov 19 '14 at 18:05


















            0














            In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
            It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



            However, (see also this) the wildcards are not supported in polling mode.






            share|improve this answer










            New contributor




            fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
            Check out our Code of Conduct.




















              Your Answer








              StackExchange.ready(function()
              var channelOptions =
              tags: "".split(" "),
              id: "2"
              ;
              initTagRenderer("".split(" "), "".split(" "), channelOptions);

              StackExchange.using("externalEditor", function()
              // Have to fire editor after snippets, if snippets enabled
              if (StackExchange.settings.snippets.snippetsEnabled)
              StackExchange.using("snippets", function()
              createEditor();
              );

              else
              createEditor();

              );

              function createEditor()
              StackExchange.prepareEditor(
              heartbeatType: 'answer',
              autoActivateHeartbeat: false,
              convertImagesToLinks: true,
              noModals: true,
              showLowRepImageUploadWarning: true,
              reputationToPostImages: 10,
              bindNavPrevention: true,
              postfix: "",
              imageUploader:
              brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
              contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
              allowUrls: true
              ,
              onDemand: true,
              discardSelector: ".discard-answer"
              ,immediatelyShowMarkdownHelp:true
              );



              );













              draft saved

              draft discarded


















              StackExchange.ready(
              function ()
              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f500724%2fwildcard-support-for-inputfilename-in-rsyslog%23new-answer', 'question_page');

              );

              Post as a guest















              Required, but never shown

























              4 Answers
              4






              active

              oldest

              votes








              4 Answers
              4






              active

              oldest

              votes









              active

              oldest

              votes






              active

              oldest

              votes









              1














              Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.






              share|improve this answer























              • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

                – AXE-Labs
                Aug 25 '14 at 19:35















              1














              Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.






              share|improve this answer























              • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

                – AXE-Labs
                Aug 25 '14 at 19:35













              1












              1








              1







              Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.






              share|improve this answer













              Ive done some research on this in the past. As of the last time i checked the imfile module doesn't support wildcards at all. Thought about possibly writing another input module but ended up just using syslog-ng on the hosts I need this functionality on.







              share|improve this answer












              share|improve this answer



              share|improve this answer










              answered Apr 19 '13 at 2:15









              Tim BrighamTim Brigham

              13.4k75098




              13.4k75098












              • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

                – AXE-Labs
                Aug 25 '14 at 19:35

















              • It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

                – AXE-Labs
                Aug 25 '14 at 19:35
















              It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

              – AXE-Labs
              Aug 25 '14 at 19:35





              It seems the free version of syslog-ng does not support wildcards... There is this work around: asylum.madhouse-project.org/blog/2013/09/10/…

              – AXE-Labs
              Aug 25 '14 at 19:35













              7














              As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.






              share|improve this answer



























                7














                As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.






                share|improve this answer

























                  7












                  7








                  7







                  As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.






                  share|improve this answer













                  As an update to this post rsyslog 8.5 (currently development but soon to be stable) does support wildcards, I've tested this and can confirm it is working.







                  share|improve this answer












                  share|improve this answer



                  share|improve this answer










                  answered Nov 12 '14 at 10:17









                  IanIan

                  7112




                  7112





















                      0














                      Here are some details on what is required:



                      http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



                      The version will become 8.6.0 stable on December, 2nd 2014.






                      share|improve this answer




















                      • 1





                        Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                        – squillman
                        Nov 19 '14 at 18:05















                      0














                      Here are some details on what is required:



                      http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



                      The version will become 8.6.0 stable on December, 2nd 2014.






                      share|improve this answer




















                      • 1





                        Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                        – squillman
                        Nov 19 '14 at 18:05













                      0












                      0








                      0







                      Here are some details on what is required:



                      http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



                      The version will become 8.6.0 stable on December, 2nd 2014.






                      share|improve this answer















                      Here are some details on what is required:



                      http://www.slideshare.net/rainergerhards1/using-wildcards-with-rsyslogs-file-monitor-imfile



                      The version will become 8.6.0 stable on December, 2nd 2014.







                      share|improve this answer














                      share|improve this answer



                      share|improve this answer








                      edited Nov 19 '14 at 18:05









                      squillman

                      35.2k979134




                      35.2k979134










                      answered Nov 19 '14 at 17:58









                      Rainer GerhardsRainer Gerhards

                      1




                      1







                      • 1





                        Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                        – squillman
                        Nov 19 '14 at 18:05












                      • 1





                        Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                        – squillman
                        Nov 19 '14 at 18:05







                      1




                      1





                      Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                      – squillman
                      Nov 19 '14 at 18:05





                      Welcome to Server Fault! We generally discourage link-only answers since links break over time. It would be beneficial to add relevant snippets to your answer so this doesn't become obsolete if/when the link breaks.

                      – squillman
                      Nov 19 '14 at 18:05











                      0














                      In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
                      It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



                      However, (see also this) the wildcards are not supported in polling mode.






                      share|improve this answer










                      New contributor




                      fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                      Check out our Code of Conduct.
























                        0














                        In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
                        It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



                        However, (see also this) the wildcards are not supported in polling mode.






                        share|improve this answer










                        New contributor




                        fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                        Check out our Code of Conduct.






















                          0












                          0








                          0







                          In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
                          It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



                          However, (see also this) the wildcards are not supported in polling mode.






                          share|improve this answer










                          New contributor




                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.










                          In newer versions of rsyslog this has been addressed, see here, in the "Wildcards" section.
                          It mentions that, as of version 8.25, wildcards have already been supported on file names only, and since 8.25 and on it also supports wildcards in paths (haven't tested it though).



                          However, (see also this) the wildcards are not supported in polling mode.







                          share|improve this answer










                          New contributor




                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.









                          share|improve this answer



                          share|improve this answer








                          edited 2 days ago





















                          New contributor




                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.









                          answered 2 days ago









                          fytsfyts

                          1013




                          1013




                          New contributor




                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.





                          New contributor





                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.






                          fyts is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
                          Check out our Code of Conduct.



























                              draft saved

                              draft discarded
















































                              Thanks for contributing an answer to Server Fault!


                              • Please be sure to answer the question. Provide details and share your research!

                              But avoid


                              • Asking for help, clarification, or responding to other answers.

                              • Making statements based on opinion; back them up with references or personal experience.

                              To learn more, see our tips on writing great answers.




                              draft saved


                              draft discarded














                              StackExchange.ready(
                              function ()
                              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f500724%2fwildcard-support-for-inputfilename-in-rsyslog%23new-answer', 'question_page');

                              );

                              Post as a guest















                              Required, but never shown





















































                              Required, but never shown














                              Required, but never shown












                              Required, but never shown







                              Required, but never shown

































                              Required, but never shown














                              Required, but never shown












                              Required, but never shown







                              Required, but never shown







                              Popular posts from this blog

                              How to write a 12-bar blues melodyI-IV-V blues progressionHow to play the bridges in a standard blues progressionHow does Gdim7 fit in C# minor?question on a certain chord progressionMusicology of Melody12 bar blues, spread rhythm: alternative to 6th chord to avoid finger stretchChord progressions/ Root key/ MelodiesHow to put chords (POP-EDM) under a given lead vocal melody (starting from a good knowledge in music theory)Are there “rules” for improvising with the minor pentatonic scale over 12-bar shuffle?Confusion about blues scale and chords

                              What if the end-user didn't have the required library?What is setup.py?What is a clean, pythonic way to have multiple constructors in Python?What does Ruby have that Python doesn't, and vice versa?What is the reason for having '//' in Python?How do I create a namespace package in Python?How to package shared objects that python modules depend on?setuptools vs. distutils: why is distutils still a thing?Navigation in Windows 10 vs code not going to virtualenv library when the same library is installed at user levelPython create package for local usePackaging a project that uses multiple python versionsWhy is permission denied on pip install except for when “--user” is included at end of command?

                              Why did Thanos need his ship to help him in the battle scene?Which actor plays Thanos in the Avengers mid-credits scene?Are there economic implications portrayed in comics where the buildings and cities are ruined almost daily?Old X-Men comic where team travels to alien world with a ring-like sun that needs recharging?Why does Ego need help sleeping?Is there an objective answer to who “the strongest Avenger” is?How did Banner get unstuck?Why did Thanos get hit?How did Thanos (or anyone) know the Infinity Stones would give him this power?Did Thanos leave Eitri alive for his after-sales service?In Avengers 1, why does Thanos need Loki?