[syslog-ng]Re: [syslog-ng]what?s wrong?
Nate Campi
syslog-ng@lists.balabit.hu
Sat, 19 Feb 2005 10:46:38 -0800
On Fri, Feb 18, 2005 at 11:05:59PM +0200, Denis Kot wrote:
> so I must create a filter something like
> filter f_filer { not filter(f_smbd); }; and this filter put to log?
It's simpler than all that, just use the final flag:
log {
source(src);
filter(f_smbd);
destination(d_smbd);
flags(final);
};
log {
source(src);
destination(messages);
};
--
Nate
"I had to quit my job to have time to read my email." - Curry, Adam [MTV
Host and net.legend] his occasional signature quote