Dear sirs. I'm newbie in syslog-ng therefore I beg you to treat my question with indulgence if it is primitive. I'm very sorry for an attached conf but I think I can't explain my problem without this. I have linux (RH) box with syslog-ng-1.4.10 (it's some outdated package but I haven't enough knowledge for its rebuilding). My problem is following: the log from MTA comes to /var/log/messages. So I have duplicate MTA log in mail.log and messages. As far as I understand the problem point is in following filters:
filter f_messages { level(info, emerg, debug, notice, warn, crit, err); }; log { source(src); filter(f_messages); destination(messages); };
There was an attempt to "log anything (except mail) of level info or higher". But mail is logging to /var/log/messages anyway. How should I modify the filters for resolving this? I will be very appreciate for your kind help. -- Yours sincerely Serge Leschinsky mailto:fish@artlife.tomsknet.ru Wednesday, June 19, 2002