[syslog-ng] using correlation to filter out some messages ?

Balazs Scheidler bazsi at balabit.hu
Sun Jan 16 16:06:46 CET 2011


On Sat, 2011-01-15 at 11:16 -0600, Martin Holste wrote:
> Ok, so the first time the raw message is seen, it is not forwarded
> through normally then and has effectively been put in limbo, not
> duplicated, right?

yes.


-- 
Bazsi




More information about the syslog-ng mailing list