In a centralized logging facility, how do I prevent remote emergency messages from flooding users' consoles while still allowing the default
For any local emerg events?
In particular, I would like to log remote emerg messages to log files, and possibly send an email, but the remote machines shouldn't disrupt work on the master server.
The master server is RHEL 7.4 x86_64
rsyslog version: 8.24.0
server side configuration (snipped):
$ModLoad imuxsock $ModLoad imjournal $ModLoad imudp $UDPServerRun 514 $ModLoad imtcp $InputTCPServerRun 514 *.emerg :omusrmsg:* $OmitLocalLogging on