[syslog-ng]syslog-ng question on filter facility/priority

[Ann Markley]

I would like to filter out kern.debug info from messages when we HUP
syslog-ng.  I have set up a filter: "filter f_kern.debug { not
facility(kern); };"  which filters out all kern messages from going to
/var/adm/messages.  I set up another filter "filter f_kern { facility(kern);
};" that logs to destination file /var/log/kern.log" so I can pick up any
kernel messages.  Is there a way to set up a filter for facilty(kern) that
will filter out the debug info but still log the higher level messages to
/var/adm/messages?  We are running on Solaris 2.6. 

Thanks!

Ann Markley
Systems Engineer
amarkley@aventail.com

Aventail Corporation
www.aventail.com



Ann Markley
Systems Engineer
amarkley@aventail.com

Aventail Corporation
www.aventail.com