-----Original Message----- From: syslog-ng-admin@lists.balabit.hu [mailto:syslog-ng-admin@lists.balabit.hu] On Behalf Of Horváth Ákos Sent: Wednesday, September 08, 2004 6:12 AM To: syslog-ng@lists.balabit.hu Cc: Iulian Topliceanu Subject: Re: [syslog-ng]filtering question Hi, AFAIK you do not need a _matching_ filter, but to set up a filter on the local5 logging _facility_. bye MaXX On Wednesday 08 September 2004 12.03, Iulian Topliceanu wrote:

Hi,

I have to following task.

I have some messages coming from a host from local5.

The messages look like:

"Sep 6 17:07:21 herakles local5:meimlo.std.me herakles.tomcat8310 2004-09-06 17:07:21,157 [WARN] [main] [] [] voicemail.mboxp.MboxpServlet: MboxpServlet not initialized"

The thing I have to is to make a filter that matches the things between 'local5:' and the first ' '. In this case the filter is 'meimlo.std.me' but this 'meimlo.std.me' could be anything like: 'blah.blu.admin'.

Is there a possibility to create a filter that if that string is different, syslog-ng will automate create a new file? Like it does when a new host is logging and it creates the dirs/files.

Does syslog-ng support such a function?

Regards, Iulian Topliceanu

_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html