[syslog-ng] netmask

Donald Rush drush at net-blazer.com
Tue Aug 22 18:10:30 CEST 2006

Thank you for your input.  I am not having an issue with getting the
logs from different devices into different log files.  What is happening
is that in the standard config with the Suse syslog-ng.conf file, it
logs all messages in one file, which I would like to keep, but I would
like to exclude anything from a remote system.  You might be telling me
below, but I don't seem to be getting it.  Below is out of the
syslog-ng.conf, what I would like to do is filter out any remote system
from that.

filter f_messages   { not facility(news, mail) and not
filter(f_iptables); };

# All messages except iptables and the facilities news and mail:
destination messages { file("/var/log/messages"); };
log { source(src); filter(f_messages); destination(messages); };

-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Werner Thal
Sent: Tuesday, August 22, 2006 5:59 AM
To: syslog-ng at lists.balabit.hu
Subject: [syslog-ng] netmask


I try to use the "netmask" filter option to generate seperate logfiles
for different subnets. 
I tried
	this 		filter krzn_all {
netmask(""); };
	this 		filter krzn_all {
netmask(; };
	this 		filter krzn_all { netmask(""); };
and	this 		filter krzn_all { netmask(; };

No errors have been reported starting syslog-ng but also no messages
have been logged.

I use syslog-ng 2.0rc1-2 on a debian Etch.

Kind Regards
W. Thal

syslog-ng maillist  -  syslog-ng at lists.balabit.hu
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

More information about the syslog-ng mailing list