[syslog-ng] How to build a filter where one message from one host not logged

[Niels Graupe]

Hi !

I want to filter with syslog-ng that a message from a special host with a special message was not filtered and everything else goes to the logfile

filter f_cisco_switches_knownerrors1
    {
        host ("hostxy")
        and match("ENVIRONMENT-3-RPS_FAILED");
    };

The Log-Message :
Mar 29 12:29:19 hostxy err 20979: Mar 29 12:29:18: %ENVIRONMENT-3-RPS_FAILED: Faulty internal power supply detected

Thanks,
Niels
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20130329/8a2a4966/attachment.htm