[syslog-ng] filtering per device

Gergely Nagy algernon at balabit.hu
Wed Apr 20 07:40:19 CEST 2011


vijay <bhaskarpeddi at gmail.com> writes:

> Hi All,
>
> I have 4 cisco devices having ip addresses for example
>
> 10.1.1.1
> 10.1.1.2
> 10.1.1.3
> 10.1.1.4
>
> already i have filtering option such that only above informational
> level(level 6) will be captured.I have new requirement that to capture
> informational  logs also of 10.1.1.4 not other devices.How to do that.

Use the host() filter.

filter f_host4 { level(info); host("10.1.1.4"); };

Or somehting like that.

-- 
|8]



More information about the syslog-ng mailing list