[syslog-ng] problem with filtering in syslog-ng

Jerry Bell jerry at nrdx.com
Tue Feb 23 22:21:38 CET 2010


I experimentally confirmed that multiple filters are treated as "AND" in 
a log{} statement.

Jerry
On 2/23/2010 2:03 PM, Fegan, Joe wrote:
>> log { source(src); filter(f_notice); filter(f_not_authpriv);
>> filter(not_ntpd); destination(messages); flags(final); };
>>      
> Question for everyone: If you have multiple filters in a single log statement does syslog-ng "OR" them or does it  "AND" them? The former might explain this behaviour...
>
> Joe.
>
>    



More information about the syslog-ng mailing list