https://bugzilla.balabit.com/show_bug.cgi?id=268 Gergely Nagy <algernon@balabit.hu> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO --- Comment #1 from Gergely Nagy <algernon@balabit.hu> 2014-01-25 20:26:34 --- I can't reproduce it with the following config: @version: 3.4 source s_l { unix-stream("var/log" tags("foo.bar")); unix-stream("var/log2" tags("foo")); }; filter f_foo { tags("foo"); }; destination d_foo { file("var/foo-tagged.log"); }; log { source(s_l); filter(f_foo); destination(d_foo); }; When I use logger -u var/log, it will be correctly dropped, while logger -u var/log2 will arrive to var/foo-tagged.log. Running syslog-ng -Fvde also says that the filter does not match. Are you sure that something else is not tagging the message with "collection"? If you are, can you perhaps run a sample message through syslog-ng -Fvde? -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.