[syslog-ng] syslog-ng open source - Problem with filter rules - Performance

Jain, Vaibhav (GE Healthcare) Vaibhav.Jain at ge.com
Thu Aug 13 10:04:24 CEST 2009


Hi

I am using syslog-ng filter option to filter the log messages based on
some filter criteria. Like

log {
source(s_network);
filter(ABCD_filter);
destination(d_ABCDfiles);
};

log {
source(s_network);
filter(PQR_filter);
destination(d_PQRfiles);
};


log {
source(s_network);
filter(XYZ_filter);
destination(d_XYZfiles);
};

...
..
.

In the above example the source is same for all the destination files
but in this configuration all the filter rules are validating the log
mesg. I want to configure it if mesg pass the filter ABCD criteria then
it should not go to other filter and if it fails the ABCD filter
criteria then it should go to next filter and so on.
Does Syslog-ng support any macro or if-else..  for this??

-  V


More information about the syslog-ng mailing list