[syslog-ng] [Bug 148] New: .classifier. unknown not set when patterndb unable to classify message

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Sun Nov 27 01:16:46 CET 2011


https://bugzilla.balabit.com/show_bug.cgi?id=148

           Summary: .classifier.unknown not set when patterndb unable to
                    classify message
           Product: syslog-ng
           Version: 3.3.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: erempel at uvic.ca
Type of the Report: ---
   Estimated Hours: 0.0


filter f_tag_unknown { tags(".classifier.unknown"); };

Using this filter results in no messages going to a destination,
but using

filter f_tag_unknown { not tags(".classifier.system"); };

logs all of the unclassified messages. The problem is that I am going
to have a lot more than just .classifier.system in my pattern database, so
this is not a viable workaround.


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list