[syslog-ng] in-list filter with MESSAGE

[Fabien Wernli]

On Tue, Oct 03, 2017 at 04:10:39PM -0400, Gopi Joshi wrote:
> I am trying to filter messages matching text stored in a txt file (plain
> txt , exact match , one word each line). but its not working

As Péter suggested, you should first extract the username from the MESSAGE,
for instance using one of the parsers (kv, csv, db, …), and then apply the
in-list filter to that extracted macro

Cheers