[syslog-ng]issues using NOT in an filter.

[Mikko Niskanen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> Anyway, I was trying something like this and it doesn't work:
> 
> filter f_messages { (level(info) or
>                      facility(authpriv))
>                      not facility(local4);
> };
> 

	Your suggestion should work:

filter f_messages { (level(info) or
                     facility(authpriv))
                     and (not facility(local4));
};


	Or, you might break it apart:


filter f_info_authpriv { level(info) or facility(authpriv); };
filter f_not_local4 { not facility(local4); };

log { source (s_1); filter (f_not_local4); filter (f_info_authpriv);
destination (d_1); };



		-MNi

	

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0

iQA/AwUBO+ZD8UXQWDVhHgF9EQI9CgCg7rRXY8MthTcDipCh+/SJB1K8DigAniXH
7Z/PvNIVfmu66DhEU5qaDmtU
=xOzn
-----END PGP SIGNATURE-----