[syslog-ng] Host filter not working?

Jakub Jankowski shasta at toxcorp.com
Tue Sep 29 20:58:12 CEST 2009


Tuesday 29 of September 2009 20:54:08 Clayton Dukes napisał(a):
> I think I'm going crazy...
> Can someone tell me why this is not filtering these hosts?
>
> filter f_not_unitylab { (
>     not host ("localhost")
>     or not host ("vnt-cm")
>     or not host ("ecats-cu")
>     );
> };
[...]
> When I start syslog-ng, I'm still getting events logged to my db for
> these hosts. What am I missing?

Boolean logic. :)

You need ANDs, not ORs.

-- 
Jakub Jankowski|shasta at toxcorp.com|http://toxcorp.com/
GPG: FCBF F03D 9ADB B768 8B92 BB52 0341 9037 A875 942D



More information about the syslog-ng mailing list