[syslog-ng]Filtering out multiple entries in log files due to different level

Balazs Scheidler bazsi@balabit.hu
Wed, 3 Apr 2002 09:25:35 +0200


On Tue, Apr 02, 2002 at 01:21:35PM -0700, Nick Chondropoulos wrote:
> I get the logs to split out by hostname year etc. but I get multiple 
> entries in a log file the higher the level. The idea was to log a 
> facility per file so I expected a single entry in the log file which I 
> guess was a woring assumption.

I don't understand you exactly. Higher priority messages are sent multiple
times?

> Is there a way to stop the following from happening:
> client> logger -p auth.emerg EMERG
> 
> server> tail <log>
> Apr  1 18:20:00 cdm010 nickc: [ID 702911 auth.emerg] EMERG
> Apr  1 18:20:00 cdm010 nickc: [ID 702911 auth.emerg] EMERG
> Apr  1 18:20:00 cdm010 nickc: [ID 702911 auth.emerg] EMERG
> Apr  1 18:20:00 cdm010 nickc: [ID 702911 auth.emerg] EMERG
> Apr  1 18:20:00 cdm010 nickc: [ID 702911 auth.emerg] EMERG
> Apr  1 18:20:00 cdm010 nickc: [ID 702911 auth.emerg] EMERG
> Apr  1 18:20:00 cdm010 nickc: [ID 702911 auth.emerg] EMERG
> Apr  1 18:20:00 cdm010 nickc: [ID 702911 auth.emerg] EMERG
> 
> and replace it with a single line of:
> Apr  1 18:20:00 cdm010 nickc: [ID 702911 auth.emerg] EMERG

syslog-ng prints as many messages as it receives, no message aggregation is
done (e.g. last message repeated NN times) And syslog-ng sends messages to
all matching destinations.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1