20 lines
705 B
Plaintext
20 lines
705 B
Plaintext
# provides UDP syslog reception
|
|
$ModLoad imudp
|
|
$UDPServerRun 514
|
|
|
|
#enables omrpog module
|
|
$ModLoad omprog
|
|
|
|
$template RFC3164fmt,"<%PRI%>%TIMESTAMP% %HOSTNAME% %syslogtag%%msg%"
|
|
$template network-fmt,"%TIMESTAMP:::date-rfc3339% [%fromhost-ip%] %pri-text% %syslogtag%%msg%\n"
|
|
|
|
#exclude unwanted messages(examples):
|
|
:msg, contains, "Child connection from" stop
|
|
:msg, contains, "exit after auth (ubnt): Disconnect received" stop
|
|
:msg, contains, "password auth succeeded for 'ubnt' from" stop
|
|
:msg, contains, "exit before auth: Exited normally" stop
|
|
if $fromhost-ip != '127.0.0.1' then {
|
|
action(type="omprog" binary="/etc/zabbix/scripts/zabbix_syslog_lkp_host.pl" template="network-fmt")
|
|
stop
|
|
}
|