# => This templates considers that you using rsyslog # => Edit /etc/rsyslog.d/50-radsecproxy.conf . The file can be named anything as long as it is ending with *.conf # => By default, a lot of systems already rsyslog #radsecproxy if ($programname == 'radsecproxy') and ($msg contains 'F-TICKS') \ then @{{IP_provided_by_eduroam}}:514 & stop # => Save and exit then restart rsyslog