[syslog-ng] problem with filtering in syslog-ng
Jerry Bell
jerry at nrdx.com
Tue Feb 23 22:21:38 CET 2010
I experimentally confirmed that multiple filters are treated as "AND" in
a log{} statement.
Jerry
On 2/23/2010 2:03 PM, Fegan, Joe wrote:
>> log { source(src); filter(f_notice); filter(f_not_authpriv);
>> filter(not_ntpd); destination(messages); flags(final); };
>>
> Question for everyone: If you have multiple filters in a single log statement does syslog-ng "OR" them or does it "AND" them? The former might explain this behaviour...
>
> Joe.
>
>
More information about the syslog-ng
mailing list