[syslog-ng]Re: [syslog-ng]what?s wrong?
   
    Nate Campi
     
    syslog-ng@lists.balabit.hu
       
    Sat, 19 Feb 2005 10:46:38 -0800
    
    
  
On Fri, Feb 18, 2005 at 11:05:59PM +0200, Denis Kot wrote:
> so I must create a filter something like
> filter f_filer  { not filter(f_smbd); }; and this filter put to log?
It's simpler than all that, just use the final flag:
log {
        source(src);
	filter(f_smbd);
	destination(d_smbd);
	flags(final); 
};
log {
	source(src);
	destination(messages);
};
-- 
Nate
"I had to quit my job to have time to read my email." - Curry, Adam [MTV
Host and net.legend] his occasional signature quote