[syslog-ng]Filter postfix log messages

Ed Ravin syslog-ng@lists.balabit.hu
Thu, 13 Nov 2003 23:30:58 -0500


On Thu, Nov 13, 2003 at 10:52:21PM +0100, Florian Lindner wrote:
> I want to filter out all log messages from postfix. They look like these:
> 
> Nov  9 14:16:28 s_sys@bastet postfix/pickup[24484]: 4D92C4580B7: uid=30 
> from=<wwwrun>
> Nov  9 14:16:28 s_sys@bastet postfix/cleanup[24510]: 4D92C4580B7: 
> message-id=<20031109131628.4D92C4580B7@bastet.centershock.net>
...
> filter f_postfix { match(".{16,16}s_sys@bastet postfix"); };
> But it doesn't work...

This works for me:

  filter smtp {
          program("^(postfix|sendmail)");
  };