[syslog-ng] Excluding the local host

Gergely Nagy algernon at balabit.hu
Wed Mar 7 15:52:16 CET 2012


Clayton Dukes <cdukes at gmail.com> writes:

> Hey all,
> Seems like it would be simple to exclude the local host, but I can't find
> anything in the docs.
> What is the best way to do this?

I suppose the easiest would be to not include the local source in the
logpath.

That is, if you have a source s_local { unix-dgram("/dev/log"); }, then
don't put that in the logpath where you don't want local logs.

If that's not an option, then you can tag the s_local messages with a
tag, and filter on that, perhaps.

-- 
|8]



More information about the syslog-ng mailing list