# ----- BEGIN Application logging section ---------------------------------
$ModLoad imfile   # Provides Text File Input Module


$template adump,"<%PRI%>%timegenerated% %HOSTNAME% %syslogtag% %msg%"

# adump log
$InputFileName /opt/oracle/product/admin/TEST1/adump
$InputFileTag adump-out
$InputFileStateFile stat-adump-out
$InputFileSeverity WARN
$InputFileFacility local7
$InputFilePollInterval 1
$InputFilePersistStateInterval 1
$InputRunFileMonitor

*.* @@myhost.com:514;adump

if $syslogtag contains 'stat-adump-out' and $syslogfacility-text == 'local7' and NOT ( $msg contains 'INFO' or $msg contains 'WARN' or $msg contains 'ERROR' or $msg contains 'CRIT' ) then ~

# ----- END Application logging section -----------------------------------

TEST1_ora_9801_20180130225009599318143795.aud
TEST1_ora_9999_20170915195851656838143795.aud
TEST1_ora_9201_20180101161557166037143795.aud
TEST1_ora_25198_20180222073002173145143795.aud

$InputFileName /opt/oracle/product/admin/TEST1/adump/*