Mailing List Archive

Hi Keith,

rsyslog.conf is read sequentially, so wherever you have your include
directive (more details here
https://www.rsyslog.com/doc/master/rainerscript/include.html) is where your
new config file(s) will be read.

Your included config (and the directories leading to it) need to be
readable by rsyslog, so you'd typically give them the same
owner&permissions as the initial rsyslog.conf.

Best regards,
Radu
--
Elasticsearch/OpenSearch & Solr Consulting, Production Support & Training
Sematext Cloud - Full Stack Observability
http://sematext.com/


On Tue, Jul 5, 2022 at 7:03 PM Clay, Keith via rsyslog <
rsyslog@lists.adiscon.com> wrote:

> I am looking to create a rsyslog.d config file for a specific log file but
> the docs aren't clear the scope of the values in that file.
>
> I don't know what variables to use to set things like owner/group and
> perms but from what I gather from the docs that will affect everything
> created after my file. The docs aren't that clear to me.
>
> Thanks,
>
>
> [r/folders/vz/nvtjl3294tg0p9tm8xq5rxjngyqg_6/T]<
> http://www.virtustream.com/>
>
>
> Keith Clay
> Data Intelligence Engineer
> Platform and Tenant Monitoring
> Cloud and Platform Operations
>
> keith.clay@virtustream.com<mailto:keith.clay@virtustream.com>
> www.virtustream.com<http://www.virtustream.com/>
>
> A Dell Technologies Business
>
>
>
> Internal Use - Confidential
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

what file something is in doesn't matter much, all the files get combined

start rsyslogd with -o /path/to/file and you will see the resulting file that
rsyslog uses as it's config.

What you are trying to do is probably more suited to rulesets than separate
files.

also, if you use the action() syntax, you specify all the permissions as part of
the action() statement and don't have side effects on other lines in the file(s)

David Lang

On Wed, 6 Jul 2022, Radu Gheorghe via rsyslog wrote:

> Date: Wed, 6 Jul 2022 11:46:53 +0300
> From: Radu Gheorghe via rsyslog <rsyslog@lists.adiscon.com>
> To: rsyslog-users <rsyslog@lists.adiscon.com>
> Cc: Radu Gheorghe <radu.gheorghe@sematext.com>
> Subject: Re: [rsyslog] creating separate config file for a log file
>
> Hi Keith,
>
> rsyslog.conf is read sequentially, so wherever you have your include
> directive (more details here
> https://www.rsyslog.com/doc/master/rainerscript/include.html) is where your
> new config file(s) will be read.
>
> Your included config (and the directories leading to it) need to be
> readable by rsyslog, so you'd typically give them the same
> owner&permissions as the initial rsyslog.conf.
>
> Best regards,
> Radu
> --
> Elasticsearch/OpenSearch & Solr Consulting, Production Support & Training
> Sematext Cloud - Full Stack Observability
> http://sematext.com/
>
>
> On Tue, Jul 5, 2022 at 7:03 PM Clay, Keith via rsyslog <
> rsyslog@lists.adiscon.com> wrote:
>
>> I am looking to create a rsyslog.d config file for a specific log file but
>> the docs aren't clear the scope of the values in that file.
>>
>> I don't know what variables to use to set things like owner/group and
>> perms but from what I gather from the docs that will affect everything
>> created after my file. The docs aren't that clear to me.
>>
>> Thanks,
>>
>>
>> [r/folders/vz/nvtjl3294tg0p9tm8xq5rxjngyqg_6/T]<
>> http://www.virtustream.com/>
>>
>>
>> Keith Clay
>> Data Intelligence Engineer
>> Platform and Tenant Monitoring
>> Cloud and Platform Operations
>>
>> keith.clay@virtustream.com<mailto:keith.clay@virtustream.com>
>> www.virtustream.com<http://www.virtustream.com/>
>>
>> A Dell Technologies Business
>>
>>
>>
>> Internal Use - Confidential
>> _______________________________________________
>> rsyslog mailing list
>> https://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com/professional-services/
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>> DON'T LIKE THAT.
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
>
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.