rulesets

[ze42]

Hello,

I'd like to configure a rsyslog server to catch informations from different hosts, and handle differently what comes from the network, from local logs.

One way to do that would be to configure the listeners (tcp/udp) with different ruleset. Ie: remote ruleset for udp and tcp and local ruleset for everything local.

Unfortunately, it requires changes to the default rsyslog.conf directly, as those settings should be done prior to listener being in place.

Do you think it could be an option? If so, any suggestion about good option names?