Re: [syslog-ng] using correlation to filter out some messages ?

Sorry for not answering any sooner, but as this post shows I usually process my backlog every now-and-then. Matthew and Martin usually helps a lot of people encountering this stuff, but certainly they may not be able to help everyone :)

Ha, this one is well beyond me--I'm also struggling with the correlation stuff.

 Then, create a timeout action (e.g. <action trigger="timeout">, which should  generate a message identical to the matched one, but this time  without the tag which indicates that the message should be dropped.

This is where you're losing me. Can you provide a working example of the whole thing?