[syslog-ng] Issue with filtering messages and sending them

[Scheidler, Balázs]

Also you can set mark-mode() to none which filters out all mark messages.
On Aug 6, 2015 4:52 PM, "Fabien Wernli" <wernli at in2p3.fr> wrote:

> Hi,
>
> On Thu, Aug 06, 2015 at 04:43:16PM +0200, Cosmin Neagu wrote:
> > source s_src {
> >        system();
> >        internal();
> > };
>
> reading the docs on "mark-mode()" you can see that it's set to "internal"
> for "program()" destinations. Also: "When internal mark mode is selected,
> internal source should be placed in the log path as this mode does not
> generate mark by itself at the destination".
>
> You *did* place "internal()" into the log path through "s_src" which
> explains why the mark messages *are* routed through the logpath containing
> your email program.
>
> Now you have to find out why the filter isn't working.
>
> What I'd also do if I were you is look up the native "smtp()" destination
> which could simplify your config.
>
> Cheers
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20150810/93195747/attachment.htm