[syslog-ng]unsubscribe

Roy G Davis syslog-ng@lists.balabit.hu
Wed, 8 Sep 2004 08:01:12 -0500


-----Original Message-----
From: syslog-ng-admin@lists.balabit.hu
[mailto:syslog-ng-admin@lists.balabit.hu] On Behalf Of Horv=E1th =C1kos
Sent: Wednesday, September 08, 2004 6:12 AM
To: syslog-ng@lists.balabit.hu
Cc: Iulian Topliceanu
Subject: Re: [syslog-ng]filtering question


Hi,

AFAIK you do not need a _matching_ filter, but to set up a filter on the

local5 logging _facility_.

bye

MaXX

On Wednesday 08 September 2004 12.03, Iulian Topliceanu wrote:
> Hi,
>
> I have to following task.
>
> I have some messages coming from a host from local5.
>
> The messages look like:
>
> "Sep  6 17:07:21 herakles local5:meimlo.std.me herakles.tomcat8310=20
> 2004-09-06 17:07:21,157 [WARN] [main] [] []
> voicemail.mboxp.MboxpServlet: MboxpServlet not initialized"
>
> The thing I have to is to make a filter that matches the things=20
> between 'local5:' and the first ' '. In this case the filter is=20
> 'meimlo.std.me' but this 'meimlo.std.me' could be anything like:=20
> 'blah.blu.admin'.
>
> Is there a possibility to create a filter that if that string is=20
> different, syslog-ng will automate create a new file? Like it does=20
> when a new host is logging and it creates the dirs/files.
>
> Does syslog-ng support such a function?
>
> Regards,
> Iulian Topliceanu


_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html