On 08/20/2012 06:17 AM, Bob Goodwin - Zuni, Virginia, USA wrote: > And I changed file name, missed that on the last change. > > [root@box9 rsyslog.d]# cat emptyfile.conf > # /etc/rsyslog.d/emptyfile > > :source, isequal, tomato /var/log/tomato.log > :source, isequal, tomato ~ > > Same result though. FWIW, I use rsyslog to log messages from my Dlink router. I don't use the "source" method. I simply have this in my rsyslog.conf.... if $msg contains 'D-Link' then /var/log/dlink.log since an entry from the router looks like this.... Aug 20 09:04:05 Mon Aug 20 09:04:07 2012 D-Link Systems DIR-615 System Log: Blocked incoming UDP packet from 95.17.110.3:56119 to 211.75.128.215:88 -- Programming today is a race between software engineers striving to build bigger and better idiot-proof programs, and the Universe trying to produce bigger and better idiots. So far, the Universe is winning. -- Rick Cook, The Wizardry Compiled -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org