[syslog-ng]Re: [syslog-ng]what?s wrong?

Nate Campi syslog-ng@lists.balabit.hu
Sat, 19 Feb 2005 10:46:38 -0800


On Fri, Feb 18, 2005 at 11:05:59PM +0200, Denis Kot wrote:
> so I must create a filter something like
> filter f_filer  { not filter(f_smbd); }; and this filter put to log?

It's simpler than all that, just use the final flag:

log {
        source(src);
	filter(f_smbd);
	destination(d_smbd);
	flags(final); 
};

log {
	source(src);
	destination(messages);
};

-- 
Nate

"I had to quit my job to have time to read my email." - Curry, Adam [MTV
Host and net.legend] his occasional signature quote