Re: [syslog-ng]Re: [syslog-ng]what?s wrong?

That works nicely, but I think the flags(final) makes life even easier! gets rid of a lot of "and not" stuff. Jesse Molina wrote:

Yes, that's the right idea.

For example, I have something like...

destination samba_log_smbd { file("/var/log/samba/smbd.log"); }; destination samba_log_nmbd { file("/var/log/samba/nmbd.log"); }; destination messages { file("/var/log/messages/messages"); };

filter f_samba_smbd { program("smbd.*"); }; filter f_samba_nmbd { program("nmbd.*"); }; filter f_messages { level(info .. warn) and not facility(auth, authpriv, cron, daemon, mail, news) and not filter(f_iptableslog, f_samba_smbd, samba_log_nmbd); };