[syslog-ng]Filtering question

[nija@magicaldesk.com]

Hello all,

I am having a problem with filtering.  Here is my statement:

filter noallnumbers  { not program ("[0-9][0-9]*"); };
filter nostartperiod { not program ("^\."        ); };
filter nostartslash  { not program ("^\/"        ); };
filter noparen1      { not program ("\\\("       ); };
filter noparen2      { not program ("\\\)"       ); };
filter nocomma       { not program ("\\\,"       ); };
filter nospace       { not program ("\\\ "       ); };
filter noamp         { not program ("\\\@"       ); };

filter goodlog       { filter (noallnumbers) or filter(nostartperiod) or
                       filter (nostartslash) or filter(noparen1) or
                       filter (noparen2)     or filter(nocomma) or
                       filter (nospace)      or filter(noamp); };


This statement does not work.  If I take the top filter, noallnumbers, and use just that, the filter works.  I am logging by program, so this is so I will not get error messages in the syslog-ng log.

Any help?

Thank you,
Nija


_____________________________________________________________
Global Virtual Desktop
Get your free Desktop at http://www.magicaldesk.com