Hi all –

Anyone know how to setup the syslog-ng conf file so that certain events can be filtered from being inserted into the db ?

i.e. I am setup now with various log { source(src); filter(f_mail); destination(mailwarn); }; type rules – this works great –

I can filter any log message into any folder –

Later in my conf I have:

log {

        source(src);

        destination(d_mysql);

};

Which tosses everything into the db – but how do I tell it to take everything except for given filters?

Any thoughts appreciated,

Edward