On 2011-04-23, Michael T. Davis <dav...@ecr6.ohio-state.edu> wrote: > Say you have some number of syslog messages directed to the console: > > auth,authpriv,daemon,kern,user,local0.* /dev/console > > Now we want local0 messages that come from "myapp" to also be sent to anyone > who's logged into the system: > > !myapp > local0.* * > > For the purposes of this discussion, these two sections may be considered > the entirety of the (current) syslog.conf file in the order presented. Is > there a way to formulate syslog.conf so that if someone is using the console, > only a single stream of messages from myapp is displayed? FWIW, we don't > care about local0 messages from anything other than myapp. > > Thanks, > Mike
!!myapp *.* * !* auth,authpriv,daemon,kern,user,local0.* /dev/console This is sort-of in the manpage but IMO the phrase "cancelling the effect of a !prog or !!prog" is not exactly crystal-clear when it comes to !!, it might be better replaced with something like "ending a !prog or !!prog block". Though I know opinions vary on this :)
