Yup, you have only one discard, at the last action. I guess you meant: :msg, startswith, "seahorse-agent:" ~ & ~ :msg, startswith, "dbus-daemon:" ~ & ~ :msg, startswith, "gnome-keyring-daemon:" ~ & ~ :msg, startswith, "quota_ufs:" ~ & ~
Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Denny Schierz > Sent: Thursday, November 04, 2010 7:59 AM > To: [email protected] > Subject: [rsyslog] 4.7: discard seems to not working > > hi, > > i want to delete some messages: > > :msg, startswith, "seahorse-agent:" ~ > :msg, startswith, "dbus-daemon:" ~ > :msg, startswith, "gnome-keyring-daemon:" ~ > :msg, startswith, "quota_ufs:" ~ > > & ~ > > but it doesn't work: > <client> ufs: [ID 708496 kern.notice] quota_ufs: over hard disk limit > (pid 578,... > > <client> seahorse-agent[3085]: file seahorse-ssh-source.c: line > ... > > is there any wrong with that? > > cu denny > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
