1

I'm trying to forward any system logs using /etc/rsyslog.conf pertaining to ssh-server-g3* will be written to a separate location and the file will have today's date in it as part of the filename.

This is what I have

ssh*                           /temp/logs/ssh.%$NOW%.log

I'm getting a syntax error but I have no idea why.

Improve this question

1 Answer 1

Reset to default
2

You need to create a template in the rsyslog in order for this to work. I hope this will help others down the road.

template myTemplate,"/temp/logs/ssh.%$NOW%.log"

:programname, startswith, "ssh" ?myTemplate
Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .