thanks to all for the pointer
В Вск, 28.04.2002, в 06:20, Geoffrey Lee написал: > There is some documentation here : > > http://www.balabit.hu/static/syslog-ng/reference/book1.html > > > But it's not written in an easy-to-undertand format .. it seems to be > quite technical. > It is the same as included with RPM (/usr/share/doc/...) just in pretty format. It would be sufficient if there were any hope it is complete. Unfortunately I suspect it is not. One main thing that is not mentioned anywhere is how incoming messages are processed and if processing stops on first match. -andrej