[syslog-ng]How do I discard a message with syslog-ng?
Ed Ravin
syslog-ng@lists.balabit.hu
Wed, 10 Nov 2004 12:14:44 -0500
I want syslog-ng to discard a message that matches a particular
string. There doesn't seem to be an easy way to do that, so I
came up with this scheme instead:
[...]
filter unwanted {
program("noisy-daemon") and match("unwanted alarm");
};
[...]
destination discard {
file("/dev/null" perm(0666) dir_perm(0755) create_dirs(no));
};
[...]
log { source(remote); filter(unwanted); destination(discard); flags(final);
};
In spite of the "flags(final)" in the log path, the unanted message still
shows up in my other log paths. Have I misunderstood how to use "final"?
Is there some other way to discard a message?
My environment is NetBSD 1.5 and NetBSD 2.0.
Thanks,
-- Ed