[syslog-ng]Filter Problem

[John A. Parker]

--=====================_88699565==_.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed


> > My intent with the following filter, etc. is to exclude
> > messages coming in
> > from facility local7 from being logged to /var/adm/messages.
> > It does not
> > seem to work as those messages are making it there. Can
> > anyone spot what
> > might be wrong with the filter/destination/log stanza(s)?
> >
> > filter f_var_adm { level(emerg,alert,crit,err)
> >                       or ( facility(kern) and level(debug) )
> >                       or ( facility(daemon) and level(notice) )
> >                       or ( facility(local2) and level(notice) )
> >                       or ( facility(auth) and level(notice,info) )
> >                       or ( facility(mail) and level(crit) )
> >                       and not ( facility(local7) ); };
>
>are any of the messages arriving from local7 in emerg, alert, crit, or err
>level?

Yes.
--=====================_88699565==_.ALT
Content-Type: text/html; charset="us-ascii"

> > My intent with the following filter, etc.
> is to exclude 
> > messages coming in 
> > from facility local7 from being logged to /var/adm/messages. 
> > It does not 
> > seem to work as those messages are making it there. Can 
> > anyone spot what 
> > might be wrong with the filter/destination/log stanza(s)?
> > 
> > filter f_var_adm { level(emerg,alert,crit,err)
> >                      
> or ( facility(kern) and level(debug) )
> >                      
> or ( facility(daemon) and level(notice) )
> >                      
> or ( facility(local2) and level(notice) )
> >                      
> or ( facility(auth) and level(notice,info) )
> >                      
> or ( facility(mail) and level(crit) )
> >                      
> and not ( facility(local7) ); };
>
> are any of the messages arriving from local7 in emerg, alert, crit, or
> err
> level?


Yes.

--=====================_88699565==_.ALT--