I set up an Rsyslog server that can receive messages from clients. The problem is that everything is concatenated to /var/log/syslog, so I'm trying to set up a filter server side.
I added this line at the end of
if $fromhost-ip == '18.104.22.168' then /var/log/clientA.log
But it doesn't work at all (even if I replace
!= which is really weird). Of course I didn't forget to restart the service.
Any idea welcome.