[syslog-ng]Some missunderstanding in filter

[Serge Leschinsky]

------------67189A4449D6F2
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Dear sirs.

I'm newbie in syslog-ng therefore I beg you to treat my question with
indulgence if it is primitive. I'm very sorry for an attached conf but
I think I can't explain my problem without this.

I have linux (RH) box with syslog-ng-1.4.10 (it's some outdated package
but I haven't enough knowledge for its rebuilding).

My problem is following:
the log from MTA comes to /var/log/messages. So I have duplicate MTA
log in mail.log and messages.
 As far as I understand the problem point is in following filters:
> filter f_messages { level(info, emerg, debug, notice, warn, crit, err); };
>log { source(src); filter(f_messages); destination(messages); };

There was an attempt to "log anything (except mail) of level info or
higher". But mail is logging to /var/log/messages anyway. How should I
modify the filters for resolving this?

I will be very appreciate for your kind help.

-- 
Yours sincerely
      Serge Leschinsky          mailto:fish@artlife.tomsknet.ru          

Wednesday, June 19, 2002  
------------67189A4449D6F2
Content-Type: application/octet-stream; name="syslog-ng.conf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="syslog-ng.conf"
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------------67189A4449D6F2--