[syslog-ng] Why does this not work?

[David Anderson]

Bazsi,

Monday, March 13, 2006, 5:40:51 PM, you wrote:

> On Fri, 2006-03-10 at 09:17 +0100, Sandor Geller wrote:
>> David Anderson wrote:
>> > 
>> > filter f_messages   { not facility(news, mail) and not
>> >        filter(f_iptables, f_router); };
>> 
>> For my best knowledge you can't use nested filters. Either use the
>> 'final' flag in your log definitions instead or create a new filter:

> Without really understanding the discussion a minor correction:

> You can use nested filters but not as a list like you used above, as the
> filter() function only supports a single item. So that should be
> rewritten as:

> filter f_messages   { not facility(news, mail) and not
> filter(f_iptables) and not filter(f_router); };


Thanks, Bazsi. That did exactly what I wanted.

-- 
Best regards,
 David                            mailto:dma at pern.co.uk