##### gluster.conf ##### # ## If you want to log every message to the log file instead of ## intelligently suppressing repeated messages, set off to ## RepeatedMsgReduction. This change requires rsyslog restart ## (eg. run 'service rsyslog restart') # #$RepeatedMsgReduction off $RepeatedMsgReduction on # ## The mmcount module provides the capability to count log messages by ## severity or json property of given app-name. The count value is added ## into the log message as json property named '$msgid' # $ModLoad mmcount $mmcountKey gf_code # start counting value of gf_code $template Glusterfsd_dynLogFile,"/var/log/glusterfs/bricks/%app-name%.log" $template Gluster_dynLogFile,"/var/log/glusterfs/%app-name%.log" $template GLFS_Template,"%msgid%/%syslogfacility-text:::uppercase%/%syslogseverity-text:::uppercase% [%TIMESTAMP:::date-rfc3339%] %msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n" # ## Pass logs to mmcount if app-name is 'gluster' # if $app-name contains 'gluster' then :mmcount: if $app-name contains 'glusterfsd' then ?Glusterfsd_dynLogFile;GLFS_Template if $app-name contains 'gluster' and not ( $app-name contains 'glusterfsd' ) then ?Gluster_dynLogFile;GLFS_Template # ## Sample configuration to send a email alert for every 50th mmcount # #$ModLoad ommail #$ActionMailSMTPServer smtp.example.com #$ActionMailFrom rsyslog@example.com #$ActionMailTo glusteradmin@example.com #$template mailSubject,"50th message of gf_code=9999 on %hostname%" #$template mailBody,"RSYSLOG Alert\r\nmsg='%msg%'" #$ActionMailSubject mailSubject #$ActionExecOnlyOnceEveryInterval 30 #if $app-name == 'glusterfsd' and $msgid != 0 and $msgid % 50 == 0 \ #then :ommail:;RSYSLOG_SyslogProtocol23Format # # ## discard logs where app-name is 'gluster' as we processed already # if $app-name contains 'gluster' then ~