glusterfs/extras/gluster-rsyslog-5.8.conf

##### gluster.conf #####

#
## If you want to log every message to the log file instead of
## intelligently suppressing repeated messages, set off to
## RepeatedMsgReduction.  This change requires rsyslog restart
## (eg. run 'service rsyslog restart')
#
#$RepeatedMsgReduction off
$RepeatedMsgReduction on

#
## The mmcount module provides the capability to count log messages by 
## severity or json property of given app-name.  The count value is added
## into the log message as json property named '$msgid'
#
$ModLoad mmcount
$mmcountKey gf_code # start counting value of gf_code

$template Glusterfsd_dynLogFile,"/var/log/glusterfs/bricks/%app-name%.log"
$template Gluster_dynLogFile,"/var/log/glusterfs/%app-name%.log"

$template GLFS_Template,"%msgid%/%syslogfacility-text:::uppercase%/%syslogseverity-text:::uppercase% [%TIMESTAMP:::date-rfc3339%] %msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n"

#
## Pass logs to mmcount if app-name is 'gluster'
#
if $app-name contains 'gluster' then :mmcount:

if $app-name contains 'glusterfsd' then ?Glusterfsd_dynLogFile;GLFS_Template
if $app-name contains 'gluster' and not ( $app-name contains 'glusterfsd' ) then ?Gluster_dynLogFile;GLFS_Template

#
## Sample configuration to send a email alert for every 50th mmcount
#
#$ModLoad ommail
#$ActionMailSMTPServer smtp.example.com
#$ActionMailFrom rsyslog@example.com
#$ActionMailTo glusteradmin@example.com
#$template mailSubject,"50th message of gf_code=9999 on %hostname%"
#$template mailBody,"RSYSLOG Alert\r\nmsg='%msg%'"
#$ActionMailSubject mailSubject
#$ActionExecOnlyOnceEveryInterval 30
#if $app-name == 'glusterfsd' and $msgid != 0 and $msgid % 50 == 0 \
#then :ommail:;RSYSLOG_SyslogProtocol23Format
#

#
## discard logs where app-name is 'gluster' as we processed already
#
if $app-name contains 'gluster' then ~