just place another filter when loggin into /var/log/messages. filter f_not_pix { host(regexp to match host); }; On Fri, Nov 23, 2001 at 05:10:47PM +0100, Olav Langeland wrote: | I am logging from a Cisco Pix to syslog-ng on a FreeBSD machine. | | --cut-from-syslog-ng-cfg-- | destination pix { file("/usr/logs/pix/log"); }; | filter f_pix { host(192.168.10.1); }; | log { source(src); filter(f_pix); destination(pix); }; | --cut-- | | This logs perfectly fine, but it still logs to /var/log/messages as | well. How do I filter away this? Something I have missed, scanned | through couple of months of mailinglist but didnt see anything | particular. Any help appreciated, syslog-ng looks really nice. | | -- | Olav Langeland - olav.langeland@nosp4m.activeisp.com | | _______________________________________________ | syslog-ng maillist - syslog-ng@lists.balabit.hu | https://lists.balabit.hu/mailman/listinfo/syslog-ng -- benny chee