Recently, a number of quite complex configurations came up here and on github issues. As it turned out, these configurations could be significantly simplified using the in-list() filter, one of syslog-ng’s lesser known features. So, if you have a long list of filters in your configuration containing IP addresses, host names, and so on, you should consider using the in-list() filter. Check out my latest blog about its advantages: