[syslog-ng]not match problem once again

Balazs Scheidler bazsi@balabit.hu
Wed, 21 Mar 2001 13:26:25 +0100


On Wed, Mar 21, 2001 at 12:55:06PM +0100, Gregor Binder wrote:
> Mariusz Bogumil on Wed, Mar 21, 2001 at 12:45:23PM +0100:
> 
> > filter f_messages { level(info..warn) and not macht("snort") and not
>                                                 ^^^^^
> That should be "match" ... I get good results with filters like this.

and match() searches in the message itself, if you want to match the program
name use program() instead.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1