Wed, 8 Sep 2004 13:12:19 +0200
AFAIK you do not need a _matching_ filter, but to set up a filter on the
local5 logging _facility_.
On Wednesday 08 September 2004 12.03, Iulian Topliceanu wrote:
> I have to following task.
> I have some messages coming from a host from local5.
> The messages look like:
> "Sep 6 17:07:21 herakles local5:meimlo.std.me herakles.tomcat8310
> 2004-09-06 17:07:21,157 [WARN] [main]  
> voicemail.mboxp.MboxpServlet: MboxpServlet not initialized"
> The thing I have to is to make a filter that matches the things between
> 'local5:' and the first ' '. In this case the filter is 'meimlo.std.me'
> but this 'meimlo.std.me' could be anything like: 'blah.blu.admin'.
> Is there a possibility to create a filter that if that string is
> different, syslog-ng will automate create a new file? Like it does when
> a new host is logging and it creates the dirs/files.
> Does syslog-ng support such a function?
> Iulian Topliceanu