[syslog-ng]Re: [syslog-ng]what?s wrong?

[Mike Pepe]

That works nicely, but I think the flags(final) makes life even easier!

gets rid of a lot of "and not" stuff.

Jesse Molina wrote:
> Yes, that's the right idea.
> 
> For example, I have something like...
> 
> 
> 
> destination samba_log_smbd { file("/var/log/samba/smbd.log"); };
> destination samba_log_nmbd { file("/var/log/samba/nmbd.log"); };
> destination messages { file("/var/log/messages/messages"); };
> 
> filter f_samba_smbd { program("smbd.*"); };
> filter f_samba_nmbd { program("nmbd.*"); };
> filter f_messages { level(info .. warn) and not facility(auth, authpriv,
> cron, daemon, mail, news) and not filter(f_iptableslog, f_samba_smbd,
> samba_log_nmbd); };
> 
>