Linux rsyslog记录指定的设备IP存放到指定的目录位置

在/etc/rsyslog.conf中加上如下设定

$template aaa,"/log/%$YEAR%-%$MONTH%/%fromhost-ip%/%fromhost-ip%_%$YEAR%-%$MONTH%-%$DAY%-%$HOUR%.log"

:fromhost-ip, isequal,"192.168.10.1" ? aaa

:fromhost-ip, isequal, "192.168.20.1"? aaa

注：将192.168.10.1 and 192.168.20.1的log存放到aaa指定的目录中

$template bbb,"/log/%$YEAR%-%$MONTH%/%fromhost-ip%/%fromhost-ip%_%$YEAR%-%$MONTH%-%$DAY%-%$HOUR%.log"

:fromhost-ip, startswith,"192.168.10." ?bbb

:fromhost-ip, startswith,"192.168.20." ?bbb

:fromhost-ip, startswith,"192.168.30." ?bbb

注：将192.168.10.X , 192.168.20.X, 192.168.30.X的设备log存到bbb指定的目录中