[syslog-ng] Syslog-ng apache filters

[Gergely Nagy]

Hugo Deprez <hugo.deprez at gmail.com> writes:

> The issue is that my apache2 logs match other filter, so I am logging
> messages 3 times :
[...]
> I would like to know how do you deal with this kind of situation ?

Put your apache2 logpath first, and use flags(final):

log {
 source(s_whatever);
 filter(f_apache);
 destination(d_whatever);
 flags(final);
};

The flags(final) option will tell syslog-ng to stop processing the
message there and then: it won't be sent forward to the rest of the
logpaths.

Hope this helps!

-- 
|8]