[syslog-ng]Re: syslog-ng question on filter facility/priority

[Balazs Scheidler]

> I would like to filter out kern.debug info from messages when we HUP
> syslog-ng.  I have set up a filter: "filter f_kern.debug { not
> facility(kern); };"  which filters out all kern messages from going to
> /var/adm/messages.  I set up another filter "filter f_kern { facility(kern);
> };" that logs to destination file /var/log/kern.log" so I can pick up any
> other kernel messages.  Is there a way to set up a filter for facilty(kern)
> that will filter out the debug info but still log the higher level messages
> to /var/adm/messages?  We are running on Solaris 2.6. 

filter f_kern { facility(kern) and not level(debug); };

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
     url: http://www.balabit.hu/pgpkey.txt