On 5/23/06, Sandor Geller <wildy@balabit.hu> wrote:

Dennis Kavadas wrote:
> Hi all
>
> I have a question, or rather a problem
>
> I've written a filter to trap entries from our BIND host that sends the
> output to /de/null (see below)
>
> I can send the match to any file or to /dev/null but syslog-ng is still
> seeing the entry from the host and is logging it to "destination d_mysql "

Use the 'final' flag or use the negated filter for the other log statements.

> I just need to filter out the match so it never reaches "destination
> d_mysql"
>
> Can anyone offer any advice ?

[snip]

> log {source(shell); filter(err-update-dns); destination(err-update-dns); };

replace this with:

log {source(shell); filter(err-update-dns); destination(err-update-dns);
flags(final);};

--
Sandor Geller
wildy@balabit.hu
_______________________________________________
syslog-ng maillist - syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html