[syslog-ng] [Bug 148] .classifier. unknown not set when patterndb unable to classify message

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Mon Nov 28 20:57:08 CET 2011


https://bugzilla.balabit.com/show_bug.cgi?id=148





--- Comment #2 from Evan Rempel <erempel at uvic.ca>  2011-11-28 20:57:08 ---
In the 3.3.3 users guid docuemntation, in 
"Example 13.3. Using classification results for filtering messages"

there is a sentence that states

"Filtering on the unknown class selects messages that did not match any rule of the pattern database. Routing these messages
into a separate file allows you to periodically review new or unknown messages."

-----------
That was what I was trying to do.


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list