Rsyslog : copy with change the facility

Posted by Dom on Server Fault See other posts from Server Fault or by Dom
Published on 2013-06-26T10:09:14Z Indexed on 2013/06/26 10:22 UTC
Read the original article Hit count: 177

Filed under:

I have saslauthd with save the logs in LOG_AUTH in our rsyslogd server. It can't be changed without recompiling, and I don't want to do that. I would like to see all the LOG_AUTH in LOG_MAIL, because I do an export to an external machine, and I would like to see all the saslauthd logs in LOG_MAIL in the distant server. Of course, in local I can add "auth.* " in the mail.log file section, but the export will not be in the right file because I filter in export by syslog Facility/Priority.

How can I export all the AUTH logs into MAIL logs ?

Thanks

© Server Fault or respective owner

Related posts about rsyslog