Feature #10521
closedSyslog, Level Filter / Setting
0%
Description
Hi,
It would be handy to be able to set the minimum level above which remote syslog records are sent to the defined (remote) machine. For example, only at warning level or above. Right now it seems that all levels are sent, so a lot of extra network traffic.
Updated by Jim Pingle over 5 years ago
- Category set to Logging
- Status changed from New to Rejected
I'm not sure this would be viable as not everything gets tagged with relevant syslog levels, especially messages from pfSense which would likely all come through the same since they all use similar logging functions.
That kind of filtering should be done on a central log processing host, irrespective of the number of messages generated.
Updated by Russell Morris over 5 years ago
Jim Pingle wrote:
That kind of filtering should be done on a central log processing host, irrespective of the number of messages generated.
NP, understand - and possible, as you say. Was just thinking to try to avoid using network bandwidth to send that info (only to be thrown out), and "stock" rsyslog supports this, that's why I asked.
Thanks!