Yeap, actually after reading the doc, this is how I fixed it Best Regards Cosmin Neagu On 8/10/2015 9:26 AM, Scheidler, Balázs wrote:
Also you can set mark-mode() to none which filters out all mark messages.
On Aug 6, 2015 4:52 PM, "Fabien Wernli" <wernli@in2p3.fr <mailto:wernli@in2p3.fr>> wrote:
Hi,
On Thu, Aug 06, 2015 at 04:43:16PM +0200, Cosmin Neagu wrote: > source s_src { > system(); > internal(); > };
reading the docs on "mark-mode()" you can see that it's set to "internal" for "program()" destinations. Also: "When internal mark mode is selected, internal source should be placed in the log path as this mode does not generate mark by itself at the destination".
You *did* place "internal()" into the log path through "s_src" which explains why the mark messages *are* routed through the logpath containing your email program.
Now you have to find out why the filter isn't working.
What I'd also do if I were you is look up the native "smtp()" destination which could simplify your config.
Cheers
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq