I would like to share with the community about a critical instruction ‘rsyslog‘ which is mandatory in order to make work exporting to CentOS 7/RHEL 8 as a logs server with mariadb-mysql database.

Very usefull in uses with “Adiscon LogAnalyzer WebApp“. You just need to add to the “/etc/rsyslog.conf” file as follows gère :

$ModLoad ommysql
$ActionOmmysqlServerPort 1234
*.* :ommysql:database-server,database-name,database-userid,database-password

Hoping to help others…
Best regards,
Antonio

A typical rsyslog.conf local file will have additional local rules defined. What happens right now, with ‘& stop’ replacing ‘& ~’ as I said the configuration error reported. If the stop directive is removed, then you get some local files populated as expected, and others directed to a directory that holds local information.

This can and will be confusing to support personnel. You need to add a test of the hostname and if the hostname IS NOT the local system name then and only then the template (rule) is leveraged. Doing this should leave local file content alone as is often defined in the actual rsyslog.conf file.

Thank you! this saves me a lot of time!

@Steffen

Many thanks, ones again for sharing this. We are truly grateful.