Mehrere rsyslog Templates für Dateiname und Inhalt

Question

Wie kann ich ein rsyslog Template machen das Dateiname UND Inhalt definiert? 

$template Testlog,"/var/log/remote/%HOSTNAME%/%$YEAR%-%$MONTH%-%$DAY%.log" 
*.* ?Testlog 

$template CustomFormat,"%timestamp% %HOSTNAME% %syslogtag% %msg%\n"
*.* ?CustomFormat 

Answer 1

Du musst die Templates miteinander kombinieren.

$template Testlog,"/var/log/remote/%HOSTNAME%/%$YEAR%-%$MONTH%-%$DAY%.log" 
$template CustomFormat,"%timestamp% %HOSTNAME% %syslogtag% %msg%\n"
*.* ?Testlog;CustomFormat

Answer 2

Du kannst die List Template Syntax benutzen. 

# dynamischer Dateiname: /var/log/remote/<hostname>/YYYY-MM-DD.log
template(name="DynDailyFile" type="list") {
    constant(value="/var/log/remote/")
    property(name="hostname")
    constant(value="/")
    property(name="timereported" dateFormat="year")
    constant(value="-")
    property(name="timereported" dateFormat="month")
    constant(value="-")
    property(name="timereported" dateFormat="day")
    constant(value=".log")
}

# Zeilenformat: <timestamp> <host> <tag> => <msg>
template(name="LineFormat" type="list") {
    property(name="timestamp" dateFormat="rfc3339")
    constant(value=" ")
    property(name="hostname")
    constant(value=" ")
    property(name="syslogtag")
    constant(value=" ===> ")
    property(name="msg" dropLastLf="on")
    constant(value="\n")
}

#### RULES ####
# Eine einzige Catch-all-Regel (verhindert Doppellogging)
*.* action(
    type="omfile"
    dynaFile="DynDailyFile"
    template="LineFormat"
    createDirs="on"
)