[syslog-ng] Syslog-ng apache filters

Gergely Nagy algernon at balabit.hu
Thu Apr 12 10:51:39 CEST 2012


Hugo Deprez <hugo.deprez at gmail.com> writes:

> Yes I do, should I specify those one first ?

The apache one should come first, otherwise your logs will go through
the ones before it (if any of the filters match, of course), resulting
in duplicate logs.

Put the apache one first, and flags(final) will not let matching logs
through to the others.

-- 
|8]



More information about the syslog-ng mailing list