https://bugzilla.balabit.com/show_bug.cgi?id=262 --- Comment #1 from Gergely Nagy <algernon@balabit.hu> 2013-12-19 12:02:47 --- This happens because the actions are not applied to the message when a corellation context lookup failure happens. I'm not entirely sure how this works inside syslog-ng... if the message gets reprocessed after a new context is started, then all is well. If not, that's a bug... But until I figure that out, I can't properly fix this issue, because even though applying the rules earlier does seem to fix the problem, I have no idea what other, possibly unwanted side-effects this change may have. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.