I would like to create a rsyslogd config file that filter the syslog for specific tag and outputs this tag to a specific file.
I create a rule file under
# Log kernel generated UFW log messages to file :syslogtag, isequal, "ABC" /var/log/ABC.log # Uncomment the following to stop logging anything that matches the last rule. # Doing this will stop logging kernel generated UFW log messages to the file # normally containing kern.* messages (eg, /var/log/kern.log) #& ~
The file is created, however the messages with ABC tag still go to the
How do I do it correctly ?