[syslog-ng] WARNING: the match() filter without the use of the value() ...

ml ml mliebherr99 at googlemail.com
Fri Jun 25 10:18:38 CEST 2010


Hello List,

i am getting this error:
WARNING: the match() filter without the use of the value() option is
deprecated and hinders performance, please update your configuration;
Restarting syslog-ng: Stopping syslog-ng: OK.
Starting syslog-ng: WARNING: the match() filter without the use of the
value() option is deprecated and hinders performance, please update
your configuration;


with this config:

@version: 3.0
#Default configuration file for syslog-ng.
#
# For a description of syslog-ng configuration file directives, please read
# the syslog-ng Administrator's guide at:
#
# http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/bk01-toc.html
#

### 1.) OPTIONS
options { long_hostnames(off);  };

source src { unix-stream("/dev/log"); internal(); };
source kernsrc { file("/proc/kmsg"); };


### 2.) DESTINATION
destination ldap  { file("/var/log/ldap.log");    };
destination authlog { file("/var/log/auth.log"); };
destination syslogmsg { file("/var/log/syslog"); };
destination cron { file("/var/log/cron.log"); };
destination daemon { file("/var/log/daemon.log"); };
destination kern { file("/var/log/kern.log"); };
destination user { file("/var/log/user.log"); };
destination mail { file("/var/log/mail.log"); };
destination lighttpd { file("/var/log/lighttpd.log"); };
destination mailinfo { file("/var/log/mail.info"); };
destination mailwarn { file("/var/log/mail.warn"); };
destination mailerr { file("/var/log/mail.err"); };
destination all { file("/var/log/all.log"); };
destination fcron { file("/var/log/fcron.log"); };
destination sshd { file("/var/log/sshd.log");    };



destination debug { file("/var/log/debug"); };
destination messages { file("/var/log/messages"); };
destination console { usertty("root"); };



### 3.) FILTERS
filter f_ldap           { match("slapd");               };
filter f_auth { facility(auth); };
filter f_authpriv { facility(auth, authpriv); };


filter f_cron { facility(cron); };
filter f_daemon { facility(daemon); };
filter f_kern { facility(kern); };
filter f_mail { facility(mail); };
filter f_user { facility(user); };
filter f_debug { not facility(auth, authpriv, news, mail) ; };
filter f_messages { level(info..warn)
        and not facility(auth, authpriv, mail, news); };
filter f_emergency { level(emerg); };
filter f_info { level(info); };
filter f_notice { level(notice); };
filter f_warn { level(warn); };
filter f_crit { level(crit); };
filter f_err { level(err); };
filter f_lighttpd { match("lighttpd");  };
filter f_fcron { match("fcron");  };
filter f_sshd { match("sshd");  };
filter f_syslog {
        not facility(authpriv, mail)
        and not filter(lapd)
        and not filter(sshd)
        and not filter(fcron)
        ; };




log { source(src); filter(f_sshd); destination(sshd);               };
log { source(src); filter(f_fcron); destination(fcron);               };
log { source(src); filter(f_ldap); destination(ldap);               };
log { source(src); filter(f_syslog); destination(syslogmsg); };
log { source(src); filter(f_authpriv); destination(authlog); };
log { source(src); filter(f_cron); destination(cron); };
log { source(src); filter(f_daemon); destination(daemon); };
log { source(kernsrc); filter(f_kern); destination(kern); };
log { source(src); filter(f_mail); destination(mail); };
log { source(src); filter(f_user); destination(user); };
log { source(src); filter(f_mail); filter(f_info); destination(mailinfo); };
log { source(src); filter(f_mail); filter(f_warn); destination(mailwarn); };
log { source(src); filter(f_mail); filter(f_err); destination(mailerr); };
log { source(src); filter(f_debug); destination(debug); };
log { source(src); filter(f_messages); destination(messages); };
log { source(src); filter(f_emergency); destination(console); };
log { source(src); destination(all); };




Any idea what i am doing wrong?


More information about the syslog-ng mailing list