[syslog-ng] [Bug 268] filter on tag does partial match

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Sat Jan 25 20:26:33 CET 2014


https://bugzilla.balabit.com/show_bug.cgi?id=268


Gergely Nagy <algernon at balabit.hu> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO




--- Comment #1 from Gergely Nagy <algernon at balabit.hu>  2014-01-25 20:26:34 ---
I can't reproduce it with the following config:

@version: 3.4
source s_l {
        unix-stream("var/log" tags("foo.bar"));
        unix-stream("var/log2" tags("foo"));
};

filter f_foo {
        tags("foo");
};

destination d_foo {
        file("var/foo-tagged.log");
};

log {
        source(s_l);
        filter(f_foo);
        destination(d_foo);
};

When I use logger -u var/log, it will be correctly dropped, while logger -u var/log2 will arrive to var/foo-tagged.log. Running syslog-ng -Fvde also says that
the filter does not match. Are you sure that something else is not tagging the message with "collection"? If you are, can you perhaps run a sample message
through syslog-ng -Fvde?


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list