[syslog-ng] A question about filtering messages

Hugo Deprez hugo.deprez at gmail.com
Sun May 6 19:30:18 CEST 2012


Hello,

It seems correct, except that I don't know the "message" parameters
you are using.
here is one of my filter with "match" parameter :

filter f_test { (match("text") or match("text2")); };

Hugo

On 2 May 2012 11:58, C. L. Martinez <carlopmart at gmail.com> wrote:
> Hi all,
>
>  I need to filter different message types with some special words in
> it. Is this a correct filter to do this??
>
> filter f_test { netmask("192.168.1.15") and ( message("FIRST_OPTION:")
> or message("SECOND_OPTION:") or message("THIRD_OPTION:")); };
>
>  Thanks.
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>


More information about the syslog-ng mailing list