[syslog-ng] grouping of sources

Joe Shaw joe at joeshaw.org
Mon Feb 9 17:36:38 CET 2009


Hi,

On Sun, Feb 8, 2009 at 10:08 AM, Balazs Scheidler <bazsi at balabit.hu> wrote:
> Interesting idea. The only similar functionality what we have right now
> is the use of 'catch-all' flag. A catch-all log rule behaves as if _all_
> sources would be specified. This is much less flexible what you have
> described though.
>
> Is this enough for you?

Not exactly; I'd like some sources (such as internal()) to go to a
local file and not over the wire to the centralized host.

Might be something to consider adding to a future roadmap... I'm sure
it's not long enough. ;)

Thanks,
Joe


More information about the syslog-ng mailing list