On Mon, Nov 4, 2013 at 9:59 AM, Stephen Harris <lists@xxxxxxxxxx> wrote: > On Mon, Nov 04, 2013 at 09:49:37AM -0500, Mauricio Tavares wrote: >> I really have nobody else but rsyslog.conf here: >> >> [root@scan log]# ls -ld /etc/rsyslog.* > > Don't use the "d" flag to "ls"; that'll stop it looking inside > directories. > Sorry; I meant ls -lh > The debug output showed it reading a file from > /etc/rsyslog.d/remote-hosts.conf > > 1968.099981778:7f2b4eda1700: cfline: '$IncludeConfig /etc/rsyslog.d/*.conf' > 1968.100012146:7f2b4eda1700: requested to include config file > '/etc/rsyslog.d/remote-hosts.conf' > You are right. To add insult to injury I created that file (to grab the log files from a few other machines. Still need to make it nicer, but good enough to test): [root@scan log]# cat /etc/rsyslog.d/remote-hosts.conf # Log remote messages by date & hostname $template DailyPerHostLogs,"/var/log/syslog/%HOSTNAME%/messages_%$YEAR%-%$MONTH%-%$DAY%.log" *.info;mail.none;authpriv.none;cron.none -?DailyPerHostLogs [root@scan log]# > -- > > rgds > Stephen > _______________________________________________ > CentOS mailing list > CentOS@xxxxxxxxxx > http://lists.centos.org/mailman/listinfo/centos _______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos