Q: How can I filter messages so that only not-already-routed lines will be routed/filtered again?
A: This is a catchall statement, and should catch all messages which were not accepted any of the previous statements.
log { source(src); filter(DEFAULT); destination(dst); };
Tried that already. It complained it couldn't parse it. I did not have a DEFAULT filter setup. Should I have? If so, what should it look like?
<URL:http://www.campin.net/syslog-ng/faq.html#catchall> Read that. In fact, I think I've read everything on your site :)
Look at the "final" log flag to stop at that point/line and not log the message again.
<URL:http://www.balabit.com/products/syslog_ng/reference/logpath.html#AEN155> I've read just about that entire DOC. However, I would really rather use flags(fallback) if possible. It sounds like thats perfect for what I'm trying to do. Am I way off base? I apologize if I'm missing anything, but I've read just about anything I can get my hands on :) __________________________________________________ Do you Yahoo!? Yahoo! Tax Center - File online, calculators, forms, and more http://tax.yahoo.com