On Fri, Nov 12, 1999 at 11:44:14PM -0800, Jacob Zehnder wrote:
ahoy,
i recently switched to syslog-ng and am loving it, though im having one small problem. i use qmail and am logging it like this
destination qmail { file ("/var/log/maillog" compress(on) sync(0) log_fifo_size(10)); };
it logs fine to /var/log/maillog.. only problem is it also wont stop logging to /var/log/messages. i was wondering if theres a way i can restrict qmails access to /var/log/messages in syslog-ng without having to do some knarly perm changes :>
As I understand you would qmail to log into /var/log/maillog, and not log into /var/log/messages. You'll need two filters to do this: filter f_qmail { facility(mail); }; filter f_messages { not facility(mail); }; log { source(src); filter(f_qmail); destination(d_qmail); }; log { source(src); filter(f_messages); destination(d_messages); }; I may add a filter function to call another filter in the future (like filter f_messages { not filter(q_mail); };) -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt