Hello !
I work on the creation of architecture on logs managements for internal purpose of a university. I would like to forwarding logs between of logs management servers with RELP protocol. First to create a test server to validate new configuration of centralization with a duplicate of all logs, and later for a server of elastic search integration.
I have face to a problem, the second server receive the log with the $fromhost-ip of the server sending the replication (not the IP source of logs) but i need to apply different file name template based on network ip source.
Is-it possible to transfer the $fromhost-ip property without works on message transmitted ? (less processing apply on logs is better for legal purpose)
Thanks for helping if you have the solution...
Fabien Stéfaniak
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
I work on the creation of architecture on logs managements for internal purpose of a university. I would like to forwarding logs between of logs management servers with RELP protocol. First to create a test server to validate new configuration of centralization with a duplicate of all logs, and later for a server of elastic search integration.
I have face to a problem, the second server receive the log with the $fromhost-ip of the server sending the replication (not the IP source of logs) but i need to apply different file name template based on network ip source.
Is-it possible to transfer the $fromhost-ip property without works on message transmitted ? (less processing apply on logs is better for legal purpose)
Thanks for helping if you have the solution...
Fabien Stéfaniak
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.