[syslog-ng]not match problem once again
Balazs Scheidler
bazsi@balabit.hu
Wed, 21 Mar 2001 13:26:25 +0100
On Wed, Mar 21, 2001 at 12:55:06PM +0100, Gregor Binder wrote:
> Mariusz Bogumil on Wed, Mar 21, 2001 at 12:45:23PM +0100:
>
> > filter f_messages { level(info..warn) and not macht("snort") and not
> ^^^^^
> That should be "match" ... I get good results with filters like this.
and match() searches in the message itself, if you want to match the program
name use program() instead.
--
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1