<p dir="ltr">The host filter applies to the $HOST field. Just use the netmask filter with 32 as mask.</p>
<div class="gmail_quote">On Mar 31, 2014 2:31 PM, "Ian Hasund" <<a href="mailto:ian@hasund.us">ian@hasund.us</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I am trying to remove a specific set of hosts from a network range using<br>
filters.<br>
<br>
for example, I have the following:<br>
<br>
filter f_home_subnet {<br>
(<br>
netmask("<a href="http://192.168.0.0/24" target="_blank">192.168.0.0/24</a>")<br>
);<br>
};<br>
<br>
I now want to exclude some specific hosts, let's say 192.168.0.10 and<br>
192.168.0.20.<br>
<br>
My attempts of adding "not host" to the above doesn't seem to work.<br>
<br>
Any pointers / suggestions would be greatly appreciated.<br>
<br>
Thanks,<br>
Ian<br>
<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>