[syslog-ng] Filter based on source?

Balazs Scheidler bazsi at balabit.hu
Thu Oct 20 16:57:29 CEST 2005


On Thu, 2005-10-20 at 10:28 -0400, Robert.Becker at motoristsgroup.com
wrote:

> Oct 20 09:59:24 server_pipe at linuxp17
> [org.jboss.resource.connectionmanager.IdleRemover] run: IdleRemover
> notifying pools, interval: 450000
> 
> server_pipe is the name of the source, defined on the client syslog server,
> this log is coming from.  When this log is piped via tcp to the central
> server I want to be able to filter the server_pipe part and send it to a
> specific destination.  Can this be done?  From what I've read the match
> only works on the message section.  I need to filter based the source.  Any
> ideas?
> 
> Thanks a bunch.

host() filter should work .

-- 
Bazsi



More information about the syslog-ng mailing list