Hi,<br>

I m trying to log only specific type of program alerts in a mysql db at
remote syslog-ng server. Till now i m able to get exactly the messages
that i wanted but i m also getting some annoying messages in mysql db.
I did researched the problem but was unable to find any satified
answer. These messages are <br>

<table border="1" width="100%">

<tbody><tr bgcolor="#7f7f7f"><td><br>
</td>
<td><b>host</b></td>
<td><b>facility</b></td>
<td><b>priority</b></td>
<td><b>level</b></td>
<td><b>tag</b></td>
<td><b>date</b></td>
<td><b>time</b></td>
<td><b>program</b></td>
<td><b>msg</b></td>
<td><b>seq</b></td>
</tr>
<tr bgcolor="#b7b7b7">
<td><input name="row" value="0" type="checkbox"></td>
<td width="10%">abc</td>
<td width="10%">kern</td>
<td width="10%">warning</td>
<td width="10%">warning</td>
<td width="10%">04</td>
<td width="10%">2005-06-16</td>
<td width="10%">08:58:35</td>
<td width="10%">On node 0 total</td>
<td width="10%">On node 0 totalpages: 65088</td>
<td width="10%">3572</td>
</tr>
<tr bgcolor="#b7b7b7">
<td><input name="row" value="1" type="checkbox"></td>
<td width="10%">abc</td>
<td width="10%">kern</td>
<td width="10%">warning</td>
<td width="10%">warning</td>
<td width="10%">04</td>
<td width="10%">2005-06-16</td>
<td width="10%">08:58:35</td>
<td width="10%">Processors</td>
<td width="10%">Processors: 1</td>
<td width="10%">3573</td>
</tr>
<tr bgcolor="#b7b7b7">
<td><input name="row" value="2" type="checkbox"></td>
<td width="10%">abc</td>
<td width="10%">kern</td>
<td width="10%">warning</td>
<td width="10%">warning</td>
<td width="10%">04</td>
<td width="10%">2005-06-16</td>
<td width="10%">08:58:35</td>
<td width="10%">ESR value after</td>
<td width="10%">ESR value after enabling vector: 00000000</td>
<td width="10%">3574</td>
</tr>
<tr bgcolor="#b7b7b7">
<td><input name="row" value="3" type="checkbox"></td>
<td width="10%">abc</td>
<td width="10%">kern</td>
<td width="10%">info</td>
<td width="10%">info</td>
<td width="10%">06</td>
<td width="10%">2005-06-16</td>
<td width="10%">08:59:29</td>
<td width="10%">parport0</td>
<td width="10%">parport0: PC-style at 0x378 (0x778) [PCSPP,TRISTATE]</td>
<td width="10%">3575</td>
</tr>
<tr bgcolor="#b7b7b7">
<td><input name="row" value="4" type="checkbox"></td>
<td width="10%">abc</td>
<td width="10%">kern</td>
<td width="10%">info</td>
<td width="10%">info</td>
<td width="10%">06</td>
<td width="10%">2005-06-16</td>
<td width="10%">08:59:29</td>
<td width="10%">parport0</td>
<td width="10%">parport0: irq 7 detected</td>
<td width="10%">3576</td></tr></tbody>
</table>

<br>

I m also attaching my syslog-ng.conf file any help would be greatly appreciated.<br>

<br>

options {&nbsp; long_hostnames(off);<br>

sync(0);<br>

keep_hostname(yes);<br>

chain_hostnames(no);<br>

use_time_recvd(yes);<br>

};<br>

<br>

source src {unix-stream(&quot;/dev/log&quot;);<br>

pipe(&quot;/proc/kmsg&quot;);<br>

internal();};<br>

<br>

source stunnel {tcp(ip(&quot;<a href="http://127.0.0.1/" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">127.0.0.1</a>&quot;) port(514) keep-alive(yes));};<br>

source netscreen {udp(ip(&quot;<a href="http://192.168.1.6/" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.1.6</a>&quot;) port(514) );};<br>

<br>

destination remoteclient {file(&quot;/var/log/HOSTS/$HOST/
<div id="mb_0">$DAY.$MONTH.$YEAR.loggedmessages&quot; create_dirs(yes));};<br>
destination dest {file(&quot;/var/log/HOSTS/$HOST/$DAY.$MONTH.$YEAR.loggedmessages&quot; create_dirs(yes));};<br>
destination d_mysql {<br>
pipe(&quot;/tmp/mysql.pipe&quot;<br>
template(&quot;INSERT INTO logs (host, facility, priority, level, tag, date,<br>
time, program, msg) VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$LEVEL',<br>
'$TAG',<br>
'$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$PROGRAM', '$MSG' );\n&quot;) template-escape(yes));<br>
};<br>
<br>
filter f_syslog {not match(&quot;STATS: dropped&quot;);};<br>
filter f_auth { facility(auth) or program(&quot;.*ftp*.&quot;) or program(&quot;.*ssh*.&quot;) or program(&quot;.*pam*.&quot;); };<br>
<br>
log {source(src); filter(f_syslog); filter(f_auth); destination(d_mysql);};<br>
log {source(stunnel); filter(f_syslog); filter(f_auth); destination(d_mysql);};<br>
log {source(netscreen); destination(d_mysql);};<br>
<br>
log {source(src); filter(f_syslog); destination(dest);};<br>
log {source(stunnel); filter(f_syslog); destination(remoteclient);};<br>
log {source(netscreen); destination(remoteclient);};</div>