2

I need some help :< Does anyone know how i can change the log severity ?

What i want to do is somethink like this.

node3 -> intermediate -> logserver

I want in the intermediate node to filter logs based on some keywords and afterwards send them with different severity on logserver.

Is that possible ?

Improve this question

1 Answer 1

Reset to default
0

You should be able to do a "shell execute" which calls a script that modifies the severity and uses logger to send it back.

From man rsyslog.conf

Shell execute
This executes a program in a subshell. The program is passed the template-generated message as the only command line parameter. Rsyslog waits until the program terminates and only then contin‐ ues to run.

   Example:
          ^program-to-execute;template

The program-to-execute can be any valid executable. It receives the template string as a single parameter (argv1).

Improve this answer
1
  • I don't want to use logger. It should be changed inside .conf {because it's an intermediate node}. There is nothing like that {Just talked with the developer}. The only way to do it is by using the template as you said, but it's not trivial how can i do it ! For the moment i 'm using a sniffer and try to match the messages of logger with my forwarded logs, in order to be parsed correctly from the server, but no luck :<
    – Nikolaidis Fotis
    Aug 3, 2010 at 17:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .