[syslog-ng] Limit logging frequency of specific messages?

[Balazs Scheidler]

On Wed, 2006-02-15 at 07:40 -0600, SOLIS, ALEX wrote:
> I don't understand.  How might limiting be possible with a filter?
> Could you give a brief example?  Thanks.

I mean this should be implemented as a filter, it is not currently
possible. For example:

filter f_rate { rate-limit("15/hour" per-host(yes)); };

log { source(src); filter(f_rate); destination(dst); };

This could even be combined with other filters like:

filter f_rate { rate-limit("15/hour" per-host(yes)); };

filter f_never_rate_limit { match("interesting patterns"); };
filter f_rate_limit { not filter(f_never_rate_limit) and filter(f_rate); }

log { source(src); filter(f_rate_limit); destination(dst); };

-- 
Bazsi