On Sun, 2015-08-09 at 19:11 -0400, Tom Horsley wrote:
I have a bunch of lines like this in /etc/rsyslog.d/systemd-drivel.conf:
:msg, contains, "Activating via systemd" ~ :msg, contains, "Activation via systemd failed" ~
Every time I boot, rsyslogd complains about the deprecated syntax:
Aug 9 18:39:21 zooty rsyslogd-2307: warning: ~ action is deprecated, consider using the 'stop' statement instead [v8.8.0 try http://www.rsyslog.com/e/2307 ]
Yet no google-fu seems to be powerful enough to find an example of "using the 'stop' statement"
Can anyone tell me *exactly* what to put in a file in /etc/rsyslog.d to use this mythical, yet uttery, utterly, undocumented "stop" statement?
I can't remember how I came up with this, but I ran into that some time back when creating a config. Here is what I found to work:
16:25-doug@wombat-~>cat /etc/rsyslog.d/pace-router.conf :fromhost-ip, isequal, "192.168.10.1" /var/log/pace.log & stop
I never did get the Pace router to write to the log but I did the errors to stop by using that language instead of the ~.