Forum Discussion
geffryti_32102
Jun 14, 2011Nimbostratus
Thanks Nitass.
I tried follow that but I get the below error...
b syslog include '"
local3.* /var/log/asm
filter f_local3a {
facility(local3);
};
destination d_asmtest {
file("/var/log/custom/asm_log_file"
template("<190>$DATE $HOST $MSGHDR$MSG\n"; template_escape(no)));
};
log {
source(local);
filter(f_local3a);
destination(d_asmtest);
};
"'
BIGpipe parsing error:
012e0022:3: The requested value (/var/log/custom/asm_log_file") is invalid (show | ( | none)) for 'include' in 'syslog'
I felt that bigpipe had it's own way of parsing templates, so I reference an existing template field in the original syslog conf file... and this is what I got... it had to declare the template and then bind it with the destination file... I followed the format but didn't help though... I will try out other things, but if you have any idea where I'm wrong here, I would appreciate it.. tnx
note: this is one of our spare units... so the destination file changed a little
b syslog include '"
local3.* /var/log/asm
filter f_local3a {
facility(local3);
};
template t_asm {
template("<190> $DATE $HOST $MSGHDR$MSG\n");
template_escape(no);
};
destination d_asmtest {
file("/var/log/lost+found/output/testasmlog" template(t_asm));
};
log {
source(local);
filter(f_local3a);
destination(d_asmtest);
};
"'
BIGpipe parsing error:
012e0022:3: The requested value (<190> $DATE) is invalid (show | | none) for 'include' in 'syslog'