[syslog-ng] Issue with filtering messages and sending them

Cosmin Neagu cosmin.neagu01 at gmail.com
Mon Aug 10 19:45:21 CEST 2015


Yeap, actually after reading the doc, this is how I fixed it

Best Regards
Cosmin Neagu

On 8/10/2015 9:26 AM, Scheidler, Balázs wrote:
>
> Also you can set mark-mode() to none which filters out all mark messages.
>
> On Aug 6, 2015 4:52 PM, "Fabien Wernli" <wernli at in2p3.fr 
> <mailto:wernli at in2p3.fr>> wrote:
>
>     Hi,
>
>     On Thu, Aug 06, 2015 at 04:43:16PM +0200, Cosmin Neagu wrote:
>     > source s_src {
>     >        system();
>     >        internal();
>     > };
>
>     reading the docs on "mark-mode()" you can see that it's set to
>     "internal"
>     for "program()" destinations. Also: "When internal mark mode is
>     selected,
>     internal source should be placed in the log path as this mode does not
>     generate mark by itself at the destination".
>
>     You *did* place "internal()" into the log path through "s_src" which
>     explains why the mark messages *are* routed through the logpath
>     containing
>     your email program.
>
>     Now you have to find out why the filter isn't working.
>
>     What I'd also do if I were you is look up the native "smtp()"
>     destination
>     which could simplify your config.
>
>     Cheers
>
>     ______________________________________________________________________________
>     Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>     Documentation:
>     http://www.balabit.com/support/documentation/?product=syslog-ng
>     FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20150810/53dc66eb/attachment.htm 


More information about the syslog-ng mailing list