[syslog-ng] Excluding the local host

[Peter Gyongyosi]

On 03/07/2012 03:52 PM, Gergely Nagy wrote:
> Clayton Dukes<cdukes at gmail.com>  writes:
>
>> Hey all,
>> Seems like it would be simple to exclude the local host, but I can't find
>> anything in the docs.
>> What is the best way to do this?
>
> I suppose the easiest would be to not include the local source in the
> logpath.
>
> That is, if you have a source s_local { unix-dgram("/dev/log"); }, then
> don't put that in the logpath where you don't want local logs.
>
> If that's not an option, then you can tag the s_local messages with a
> tag, and filter on that, perhaps.
>

If you want to go that way, it's even easier than that, as, quoting the 
manual:

> Every message automatically has the tag of its source in .source.<id_of_the_source_statement> format

greets,
Peter