Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Once again, i found that Rsyslog is not as flexible as i expected...

My application logs to LOCAL5.* ( depending on the severity )

I would like to see on my centralized log server only LOCAL5.WARNING and above

I assumed and tested

local5.info            ~

However this means block LOCAL5.INFO and ABOVE

How do i make it block LOCAL5.INFO and BELOW ???

Suggestions please?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

It seems

if $syslogfacility-text == 'local5' and $syslogseverity >= '5' then ~

did the trick...

share|improve this answer
    
Glad you resolved this issue. Please be sure to mark your answer as "accepted" when you are able. –  jscott Jul 20 '12 at 3:06

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.