Forum Discussion

aR_297682's avatar
aR_297682
Icon for Nimbostratus rankNimbostratus
Apr 05, 2017

Configuring multiple syslog filters

Has anyone configured multiple syslog filters to different remote syslog server with different severity levels. Can we configure something like below

 

include " filter f_remote_audit1 { facility(local2) and level(notice) and match(\"AUDIT\"); }; destination d_remote_loghost1 { udp(\"192.168.1.34\" port(514)); }; log { source(s_syslog_pipe); filter(f_remote_audit1); destination(d_remote_loghost1); }; filter f_remote_audit2 { facility(local0) and level(warn); }; destination d_remote_loghost2 { udp(\"172.16.1.34\" port(514)); }; log { source(s_syslog_pipe); filter(f_remote_audit2); destination(d_remote_loghost2); }; "