Linux rsyslog記錄指定的設備IP存放到指定的目錄位置

在/etc/rsyslog.conf中加上如下設定

$template aaa,"/log/%$YEAR%-%$MONTH%/%fromhost-ip%/%fromhost-ip%_%$YEAR%-%$MONTH%-%$DAY%-%$HOUR%.log"

:fromhost-ip, isequal,"192.168.10.1" ? aaa

:fromhost-ip, isequal, "192.168.20.1"? aaa

注：將192.168.10.1 and 192.168.20.1的log存放到aaa指定的目錄中

$template bbb,"/log/%$YEAR%-%$MONTH%/%fromhost-ip%/%fromhost-ip%_%$YEAR%-%$MONTH%-%$DAY%-%$HOUR%.log"

:fromhost-ip, startswith,"192.168.10." ?bbb

:fromhost-ip, startswith,"192.168.20." ?bbb

:fromhost-ip, startswith,"192.168.30." ?bbb

注：將192.168.10.X , 192.168.20.X, 192.168.30.X的設備log存到bbb指定的目錄中