You will need to set the logfile locations on a per machine basis using their /etc/rsyslog.conf file. That is where you set the file name for each log point.<br><br>If they all go to the same <host>:/var/log/messages it should still be parsable as they should include <hostname> as part of the record.<br>
<br><div class="gmail_quote">On Tue, Jul 14, 2009 at 12:18 PM, Mills John M-NPHW64 <span dir="ltr"><<a href="mailto:Jmills@motorola.com">Jmills@motorola.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Recap: I need to capture and collect remote syslogd messages sent to my F10 system which runs 'rsyslogd'.<br>
<br>
Jim, ALErs -<br>
<br>
Thanks for the note. I made some headway but still have a question about '/etc/rsyslogd.conf'.<br>
<br>
1. My total failure to receive messages from remote senders was apparently a domain partitioning issue on our network. I moved to different sub-domain and now I copy.<br>
<br>
2. The UDP/port 514 server seems to be started properly with:<br>
...<br>
<div class="im"># Provides UDP syslog reception<br>
$ModLoad imudp.so<br>
$UDPServerRun 514<br>
</div>...<br>
<br>
3. I successfully write the incoming traffic to a particular file with:<br>
...<br>
# Save external messages to ext_src.log<br>
:fromhost-ip, startswith, "10." /var/log/ext_src.log<br>
...<br>
<br>
(I don't really need any IP filtering except that the message originated externally, but this is fine for the moment.)<br>
<br>
QUESTION: How can I _stop_ the incoming traffic from remote servers from also appearing on '/var/log/messages'?<br>
<br>
Thanks for any further guidance.<br>
<font color="#888888"><br>
- Mills<br>
<br>
</font><br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
<br></blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br>Actively in pursuit of Life, Liberty and Happiness <br><br>