rsyslogd filters based on $programname

[davidchappelle]

This rule is never successfully matched because winston-syslog does not produce a valid format that can be filtered by program name:

/etc/rsyslog.d/01-app.conf

if $programname == 'app' then {
    action(type="omfile" file="/var/log/app.log")
    ~ stop
}

Here is an example log message showing up in /var/log/syslog that is not being properly filtered. Note the extraneous localhost. I am pretty sure that this is what is screwing things up.

Jan  3 19:54:29 tegra-ubuntu localhost app[30934]: info: interface-proxy.js: Updating the interface proxy

[ZimGil]

I just ran into this as well...
There must be a way to omit this.

Passing localhost: '' or locahost: null won't work.

EDIT:

Sorry, passing localhost: '' or localhost: null does work