[syslog-ng]match not match

Mon, 5 Mar 2001 13:26:47 -0500

This is a multi-part message in MIME format.

------=_NextPart_000_0055_01C0A577.ED7C2000
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I have the following filter rules

filter f_sonicwall { host("sonicwall") and (not match("*http*")); };

filter f_sonicwall-www { host("sonicwall") and match("*http*");=20

the sonicwall-www one works but the sonicwall just catches everything =
ignoring the not match statement

i tried the following:

filter f_sonicwall { host("sonicwall") and (not match("*http*")); };

filter f_sonicwall { host("sonicwall") and (not (match("*http*")));=20

};

filter f_sonicwall { host("sonicwall") and not match("*http*"); };

filter f_sonicwall { (host("sonicwall") and (not match("*http*")));=20

};

#filter f_kern { facility(kern) and not level(debug); };

Any ideas ??

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~=20

I am not the poet of goodness only....I do not decline to be the poet of =
wickedness also.=20

-Walt Whitman=20

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

------=_NextPart_000_0055_01C0A577.ED7C2000
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2919.6307" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT size=3D2>
<P>I have the following filter rules</P>
<P>filter f_sonicwall { host("sonicwall") and (not match("*http*")); =
};</P>
<P>filter f_sonicwall-www { host("sonicwall") and match("*http*"); </P>
<P>&nbsp;</P>
<P>the sonicwall-www one works but the sonicwall just catches everything =

ignoring the not match statement</P>
<P>&nbsp;</P>
<P>i tried the following:</P>
<P>filter f_sonicwall { host("sonicwall") and (not match("*http*")); =
};</P>
<P>filter f_sonicwall { host("sonicwall") and (not (match("*http*"))); =
</P>
<P>};</P>
<P>filter f_sonicwall { host("sonicwall") and not match("*http*"); =
};</P>
<P>filter f_sonicwall { (host("sonicwall") and (not match("*http*"))); =
</P>
<P>};</P>
<P>&nbsp;</P>
<P>#filter f_kern { facility(kern) and not level(debug); =
};</P></FONT><FONT=20
face=3DArial size=3D2>
<P>Any ideas ??</P>
<P>&nbsp;</P></FONT><FONT face=3D"Times New Roman">
<P>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ =
</P>
<P>I am not the poet of goodness only....I do not decline to be the poet =
of=20
wickedness also. </P>
<P align=3Dcenter>-Walt Whitman </P>
<P=20
align=3Djustify>~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~=
~~~~~~~~</P></FONT></DIV></BODY></HTML>

------=_NextPart_000_0055_01C0A577.ED7C2000--