rsyslog将相同的数据logging到多个文件

我是新的configurationrsyslog集中日志logging，并想知道如果你的专家之一，可以帮我解决以下问题。 我正在尝试将每个远程主机的日志存储到每个主机目录。 除了maillog，这工作得很好。 出于某种原因，maillog进入了特定主机的定义目录，但是也为所有运行邮件的主机写入/ var / log / maillog。

有什么特定的configuration会导致日志被写入多个地方？

这是我的remote-hosts.conf文件

$ModLoad imtcp $InputTCPServerRun 514 $DirGroup root $DirCreateMode 0755 $FileGroup root $template PerHostAuth,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/auth.log" $template PerHostCron,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/cron.log" $template PerHostSyslog,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/syslog" $template PerHostDaemon,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/daemon.log" $template PerHostKern,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/kern.log" $template PerHostLpr,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/lpr.log" $template PerHostUser,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/user.log" $template PerHostMail,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/mail.log" $template PerHostMailInfo,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/mail.info" $template PerHostMailWarn,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/mail.warn" $template PerHostMailErr,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/mail.err" $template PerHostNewsCrit,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/news.crit" $template PerHostNewsErr,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/news.err" $template PerHostNewsNotice,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/news.notice" $template PerHostDebug,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/debug" $template PerHostMessages,"/srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/messages" auth,authpriv.* ?PerHostAuth *.*;auth,authpriv.none -?PerHostSyslog cron.* ?PerHostCron daemon.* -?PerHostDaemon kern.* -?PerHostKern lpr.* -?PerHostLpr mail.* -?PerHostMail user.* -?PerHostUser mail.info -?PerHostMailInfo mail.warn ?PerHostMailWarn mail.err ?PerHostMailErr news.crit ?PerHostNewsCrit news.err ?PerHostNewsErr news.notice -?PerHostNewsNotice *.=debug;\ auth,authpriv.none;\ news.none;mail.none -?PerHostDebug *.=info;*.=notice;*.=warn;\ auth,authpriv.none;\ cron,daemon.none;\ mail,news.none -?PerHostMessages 

所以发生了什么是我有日志到/ var / log / maillog 所有我的邮件服务器通过syslog发送日志，除了他们个人目录下

• 带有可变input文件名的rsyslog
• Rsyslog：使用TCP在集中式日志服务器上打开1047个文件描述符后停止
• Rsyslog由客户端过滤
• Rsyslogdynamicvariables
• 通过rsyslog和可能的catchallfilter接收Apache访问和错误日​​志

 /srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/Host1/mail.log /srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/Host2/mail.log /srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/Host3/mail.log /srv/rsyslog/%$YEAR%/%$MONTH%/%$DAY%/Host4/mail.log 

什么是正确的方法来阻止日志被写入远程系统的maillog？

谢谢您的帮助！！