You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

32 lines
1.3 KiB

<?xml version="1.0" encoding="UTF-8"?>
<Configuration monitorInterval="30">
<!--
Do not log to the console as it may break the application.
Any message sent to the console also goes to splunkd, potentially
breaking the communication between the external search command and Splunk.
The communication b/w splunk and external command relies on clear data exchange,
and console logging can cause errors or miscommunication.
-->
<Properties>
<Property name="name">fieldselector</Property>
<Property name="pattern">%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%equals{%X{component}}{}{fieldselector}] [%t] %c{1}:%L - %m%n</Property>
</Properties>
<Appenders>
<RollingFile name="RollingFile" fileName="${env:SPLUNK_HOME}/var/log/splunk/${name}.log"
filePattern="${env:SPLUNK_HOME}/var/log/splunk/${name}.log.%i" immediateFlush="false">
<PatternLayout>
<Pattern>${pattern}</Pattern>
</PatternLayout>
<Policies>
<SizeBasedTriggeringPolicy size="25 MB"/>
</Policies>
<DefaultRolloverStrategy max="10"/>
</RollingFile>
</Appenders>
<Loggers>
<Root level="info" includeLocation="true">
<AppenderRef ref="RollingFile"/>
</Root>
</Loggers>
</Configuration>