"This flag makes a log statement 'fallback'. Being a fallback statement means that only messages not matching any 'non-fallback' log statements will be dispatched." Presumably this means "...messages not matching any 'non-fallback' log statements flagged as 'final' ...." Could it be possible to change the behavior, or have an alternate mode, that catches all message that haven't reached a "final" yet? ~BAS l8* -lava (Brian A. Seklecki - Pittsburgh, PA, USA) http://www.spiritual-machines.org/ "...from back in the heady days when "helpdesk" meant nothing, "diskquota" meant everything, and lives could be bought and sold for a couple of pages of laser printout - and frequently were."
Brian A. Seklecki wrote:
"This flag makes a log statement 'fallback'. Being a fallback statement means that only messages not matching any 'non-fallback' log statements will be dispatched."
Presumably this means "...messages not matching any 'non-fallback' log statements flagged as 'final' ...."
No.
Could it be possible to change the behavior, or have an alternate mode, that catches all message that haven't reached a "final" yet?
What problem are you trying to solve? Simply put a catch-all log definition to the end of your configuration. -- Sandor Geller wildy@balabit.hu
What problem are you trying to solve? Simply put a catch-all log definition to the end of your configuration.
At 3 AM last night I realized that you need: # catch all messages that haven't qualified for other # destination{}'s yet log { source(src); destination(messages); flags(fallback); }; # catch a copy of all messages that were flagged for secondary # destinations{}'s already, but not flagged finalized, such # as those sent to a PIPE/FIFO via program(), for which we also # want a log file copy of log { source(src); destination(messages); }; Anyway it's ugly. But, keeping these configs graceful at this point is ...well, moot. ~BAS
-- Sandor Geller wildy@balabit.hu _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
l8* -lava (Brian A. Seklecki - Pittsburgh, PA, USA) http://www.spiritual-machines.org/ "...from back in the heady days when "helpdesk" meant nothing, "diskquota" meant everything, and lives could be bought and sold for a couple of pages of laser printout - and frequently were."
participants (2)
-
Brian A. Seklecki
-
Sandor Geller