Subject: [rsyslog] Can a single logfile be part of multiple imfile configs?


Hi everyone,

My basic question: Can the same logfile be used in two imfile inputs?

I have a single logfile that I need to send to a two distinct destinations.  The config is stored in a single file, so I just duplicated that file and changed the naming of the rules and stuff in it so there would be no collision.  This resulted in two paragraphs like so (for brevity, I removed the actual ruleset being called):
input(type="imfile"
        file="/opt/oracle/domains/py/soa_domain/mserver/soa_domain/servers/vm_bam_server1/logs/vm_bam_server1.out"
        tag="rslog_soapy1_bam1out:"
        facility="local6"
        PersistStateInterval="100"
        ruleset="Rule-splunk_soapy1_bam1out"
        reopenOnTruncate="on"
)

input(type="imfile"
        file="/opt/oracle/domains/py/soa_domain/mserver/soa_domain/servers/vm_bam_server1/logs/vm_bam_server1.out"
        tag="rslog_soapy1_bam1out:"
        facility="local6"
        PersistStateInterval="100"
        ruleset="Rule-rslog_soapy1_bam1out"
        reopenOnTruncate="on"
)
What I'm seeing is that the content is not being sent to the second destination.  So does this mean that a logfile can only be used in a single imfile input?

Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate
One La-Z-Boy Drive | Monroe, Michigan 48162  | * 734-384-6403 | | * 7349151444 | *  [EMAIL PROTECTED]<mailto:%7BE-mail%7D>
www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy>

[cid:lzbVertical_hres.jpg]

This message is intended only for the individual or entity to which it is addressed.  It may contain privileged, confidential information which is exempt from disclosure under applicable laws.  If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information.  If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you. _______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.