[syslog-ng] syslog-ng Filter expression help

cod3fr3ak rvc.pobox+unixlists at gmail.com
Wed Jan 28 13:46:46 CET 2009


Is there anyway I can combine these filters into a single line per host?

filter f_host-dns1 { host ("SVR006*") or host ("dns1*"); };
filter f_host-dns2 { host ("SVR015*") or host ("dns2*"); };
filter f_host-dns21 { host ("SVR138*") or host ("dns21*"); };
filter f_query-dns1 { filter (f_local0) and filter (f_host-dns1); };
filter f_query-dns2 { filter (f_local0) and filter (f_host-dns2); };
filter f_query-dns21 { filter (f_local0) and filter (f_host-dns21); };

I think I can but I am unsure of how syslog-ng handles ANDs and ORs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090128/4c46325f/attachment.htm 


More information about the syslog-ng mailing list