[syslog-ng] using correlation to filter out some messages ?

[Martin Holste]

> Sorry for not answering any sooner, but as this post shows I usually
> process my backlog every now-and-then. Matthew and Martin usually helps
> a lot of people encountering this stuff, but certainly they may not be
> able to help everyone :)
>

Ha, this one is well beyond me--I'm also struggling with the correlation stuff.

>  Then, create a timeout action (e.g. <action trigger="timeout">, which should
>  generate a message identical to the matched one, but this time
>  without the tag which indicates that the message should be dropped.
>

This is where you're losing me.  Can you provide a working example of
the whole thing?