[syslog-ng] filter after source or indifferent?

[Giovanni Mancuso]

Hi,

i have a question about syslog-ng configuration.

I configure my log path in this way:

log {
    source(s_funambol);
    destination(d_network);
    filter(f_funambol);
};

And it doesn't work.

If i configure the log path in this way:


log {
    source(s_funambol);
    filter(f_funambol);
    destination(d_network);
};

It works.

Is it normal?

Is required that the filter goes after the source?

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100427/99c3d51a/attachment.htm