[syslog-ng] log path with two destinations - flow control problem

Tomáš Novosad tomas.novosad at linuxbox.cz
Tue Feb 18 07:27:13 CET 2014


Many thanks for the replies,

i've just tested proposed solution and it seems to work as expected.

Thanks again and wish You all a nice day.
-- 
Tomáš Novosad
LinuxBox.cz, s.r.o.
28. října 168, 709 00 Ostrava

tel.:   +420 591 166 221
mobil:  +420 737 238 655
email:  tomas.novosad at linuxbox.cz
jabber: novosad at linuxbox.cz
www.linuxbox.cz

mobil servis: +420 737 238 656
email servis: servis at linuxbox.cz

On 18. 2. 07:15, Balazs Scheidler wrote:
> The multiple embedded log statement is the expected solution as Evan wrote.
> You can even use move common processing elements upwards, before the first
> embedded log statement so they get applied before both paths.
> 
> The dst, filter, dst should also work though. I'll check that.
> On Feb 17, 2014 5:13 PM, "Evan Rempel" <erempel at uvic.ca> wrote:
> 
> > A while back I recall something related to multiple destinations in the
> > same log statement
> > and flow control issues.
> >
> > Try this
> >
> > log {
> >    source(pipe_load);
> >    parser(maillog); #-- parse message details
> >    log {
> >      filter(f_sendmail); #-- basic filter for sendmail program
> >      destination(maillog_base); #-- store message in tableA - basic info
> > only
> >      flags(flow-control);
> >    }
> >
> >    log {
> >      filter(f_sendmail_from_or_to); #-- filter only messages which have
> > "from" or "to" address defined
> >      destination(maillog_detail); #-- strore the deatiled info into tableB
> >      flags(flow-control);
> >    }
> > }
> >
> >
> > Evan.
> >



More information about the syslog-ng mailing list