On 2009-06-02, Robert Fekete wrote:
I think the problem is that you define a pattern in your xml for the program as well:
<program name='logger'> <pattern>param</pattern> The <pattern> tag overrides the <program name>, so instead of logger, syslog-ng thinks this rule applies to messages that have "param" in their PROGRAM field.
In addition to what you've quoted above, I also tried: 1. <program name='logger'> <pattern>logger</pattern> 2. <program name='somethingirrelevant'> <pattern>logger</pattern> and even without <pattern>: 3. <program name='logger'> All of these give me the same result - no match. Any other suggestions? Cheers, Jakub. -- Jakub Jankowski|shasta@toxcorp.com|http://toxcorp.com/ GPG: FCBF F03D 9ADB B768 8B92 BB52 0341 9037 A875 942D