Hello, It seems correct, except that I don't know the "message" parameters you are using. here is one of my filter with "match" parameter : filter f_test { (match("text") or match("text2")); }; Hugo On 2 May 2012 11:58, C. L. Martinez <carlopmart@gmail.com> wrote:
Hi all,
I need to filter different message types with some special words in it. Is this a correct filter to do this??
filter f_test { netmask("192.168.1.15") and ( message("FIRST_OPTION:") or message("SECOND_OPTION:") or message("THIRD_OPTION:")); };
Thanks. ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq