These resemble the default format that people (and log analyzers) usually expect.

However, for some reason or another, it may be required to change the log format.

Config Statements template myFormat,rawmsgn ActionFileDefaultTemplate myFormat Log anything (except mail) of level info or higher.

Dont log private authentication messages.info;mail.none;authpriv.none;cron.none varlogmessages The authpriv file has restricted access.

Log all the mail messages in one place.

Log cron stuff cron.

It consist of fields to be written, potential modifications as well as literal text.

In the sample config statement, rawmsg ist a property that contains the syslog message as it was received by rsyslogd (received from any source, for example a remote system or the local log socket).

The string n is a line feed (ASCII LF), a constant being added to the string.

Usually, log line templates need to end with n, because without that, all log records would be written into a single line.

Note that there are many fields and options for these fields that you can specify.

But getting into the detail of all of that is beyond the scope of this cookbook-style book.

Please see the property replacer official documentation for more details.

The ActionFileDefaultTemplate then makes the newly defined template the default for all file actions.

But otherwise, it is equivalent to template myFormat,rawmsgn The authpriv file has restricted access.

Format Log all the mail messages in one place.

Format Log cron stuff cron.

Scroll to top rsyslog.com uses cookies to ensure that we give you the best experience on our website.

If you continue to use this site, you confirm and accept the use of Cookies on our site.

Template Rsyslog_Traditionalfileformat