Re: [syslog-ng] Issue with filtering messages and sending them

Hi, On Thu, Aug 06, 2015 at 04:43:16PM +0200, Cosmin Neagu wrote:

source s_src { system(); internal(); };

reading the docs on "mark-mode()" you can see that it's set to "internal" for "program()" destinations. Also: "When internal mark mode is selected, internal source should be placed in the log path as this mode does not generate mark by itself at the destination". You *did* place "internal()" into the log path through "s_src" which explains why the mark messages *are* routed through the logpath containing your email program. Now you have to find out why the filter isn't working. What I'd also do if I were you is look up the native "smtp()" destination which could simplify your config. Cheers