Rsyslog action. Actions (Outputs): When a rule matches, its actions are executed. connecting to a remote system) and when. Build a correct mental model of rsyslog’s architecture using the message pipeline. Please note that the minus sign also works with dynamic file name selectors. Configure Rsyslog to read application logs, transform them with JSON templates, add custom fields, and forward everything to Better Stack for centralized monitoring. This will help you predict where to add filters, which actions will run, and why your snippets behave as they do. Rsyslog will now automatically generate file names for you and store the right messages into the right files. This can be a single action, or an arbitrary complex script enclosed in curly braces. You can also use any other schema of your liking - you just need to define a proper template and assign this template to the action. See the HTML documentation for further details on database logging. Actions determine what to do with the message: write to a file, forward to a remote server, insert into a database, or other processing. Jun 6, 2025 ยท Learn how to collect, process, and centralize logs with Rsyslog in this comprehensive tutorial. You can create that schema with the createDB. SQL file that came with the rsyslog package. g. The ACTION attribute represents an action to be performed if the expression returns the value true. Key rules to understand the rsyslog processing model: Inputs submit messages to a ruleset. Configures rsyslog to report suspension and reactivation of the action. . This is useful to note which actions have problems (e. dmmqk kpjly ddyvp fdnj fjoy hfwah zjuwb fnx pdwgez lqkm