Page 1 of 1
Filter events at the source
Posted: Thu Nov 12, 2015 2:00 pm
by dlukinski
How to limit logs events sent by the source to the LOG server?
- is there way to send only Security logs or even event-type-based logs from the client to the LOG server?
Thank you
Re: Filter events at the source
Posted: Thu Nov 12, 2015 2:24 pm
by jdalrymple
This depends on the type of source, but almost always the answer is yes.
http://serverfault.com/questions/543494 ... sing-nxlog
http://www.rsyslog.com/sending-messages ... og-server/
http://www.ciscopress.com/articles/arti ... 8&seqNum=3
Be aware that if you don't send it to NLS, NLS can't help you retroactively resolve problems.
Re: Filter events at the source
Posted: Fri Nov 13, 2015 10:23 am
by dlukinski
This worked, thank you very much!
Re: Filter events at the source
Posted: Fri Nov 13, 2015 2:49 pm
by rkennedy
Glad to see this worked!
I will now close this thread out, but feel free to open another if you ever need assistance.