[syslog-ng] How to "drop" a message, effectively skipping further processing and not logging it?

[Eli Stair]

Geller, Sandor (IT) wrote:
> Hello,
> 
>  > Is there any way other than this to keep a message from being
>  > sent to another
>  > host or a file?  If not, is there any way to tell syslog-ng
>  > NOT to modify the
>  > state of a file, just to send data TO it?  That, or an
>  > internal "drop"
>  > stop-processing built-in destination would be extremely useful.
> 
> Simply remove all destinations from the log section and use
> flags(final) will do the trick.
> 


Don't I feel daft... I recall trying that a couple years ago, but had errors I 
don't seem to have resolved before deciding to just write to /dev/null. I 
must've botched the syntax and thought that you HAD to have a destination in a 
log line!

Thanks for the suggestion.

Cheers,

/eli