<div><br>mmm....</div>
<div> </div>
<div>i don't see this option anywhere is hte man pages of doc's...<br>thanks, it worked !!</div>
<div><br> </div>
<div><span class="gmail_quote">On 5/23/06, <b class="gmail_sendername">Sandor Geller</b> <<a href="mailto:wildy@balabit.hu">wildy@balabit.hu</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">Dennis Kavadas wrote:<br>> Hi all<br>><br>> I have a question, or rather a problem<br>><br>> I've written a filter to trap entries from our BIND host that sends the
<br>> output to /de/null (see below)<br>><br>> I can send the match to any file or to /dev/null but syslog-ng is still<br>> seeing the entry from the host and is logging it to "destination d_mysql "<br>
<br>Use the 'final' flag or use the negated filter for the other log statements.<br><br>> I just need to filter out the match so it never reaches "destination<br>> d_mysql"<br>><br>> Can anyone offer any advice ?
<br><br>[snip]<br><br>> log {source(shell); filter(err-update-dns); destination(err-update-dns); };<br><br>replace this with:<br><br>log {source(shell); filter(err-update-dns); destination(err-update-dns);<br>flags(final);};
<br><br>--<br>Sandor Geller<br><a href="mailto:wildy@balabit.hu">wildy@balabit.hu</a><br>_______________________________________________<br>syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu
</a><br><a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html
</a><br><br></blockquote></div><br>