[syslog-ng]Filter on severity range

Jon Marks j-marks@uiuc.edu
Fri, 29 Dec 2000 12:11:46 -0600


Thank you very much, Mr. Arlt, for your prompt response! This seems to work
just fine. I have another question.

It would seem to me that the method I outlined *should* work, although
the shorthand is preferable. Even so, it doesn't work. I seem to have
trouble calling other filters. For example, syslog-ng doesn't yield a
parse error if I use a filter identifier which doesn't exist (e.g. a
typo). Also, it doesn't seem to evaluate the filter properly. The
example copied below fails to catch any messages at all. Why is this?
Am I misunderstanding the semantics of calling other filters or using
connective operators?

Again, thank you! 

On Fri, Dec 29, 2000 at 10:56:42AM -0700, Brad Arlt wrote:
> On Fri, Dec 29, 2000 at 11:25:08AM -0600, Jon Marks wrote:
> > filter f_info { level(info) or level(notice) or .. or level(emerg); };
> > filter f_daemon { facility(daemon) and filter(f_info); };
> 
> This should condense into:
> 
> filter f_filtername { facility(daemon) and level(emerg..info); };
> 
> ----------------------------------------------------------------------------
>    __o		Bradley Arlt	  Email: arlt@cpsc.ucalgary.ca         o__
>  _ \<_				    WWW: www.acs.ucalgary.ca/~bdarlt   _>/ _
> (_)/(_)  -Eat well, sleep peacefully, drink lots, and ride like hell. (_)\(_)
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng

-- 
Jonathan Marks

Systems Administrator, Production Systems Group
Computing and Communication Services Office
University of Illinois at Urbana-Champaign