Lol, sorry, totally scrwed myself. This is such a frequent error that I did not notice what you really did.
Besides the last & ~ it looks good. I think a startup debug log would be useful. Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Rainer Gerhards > Sent: Thursday, November 04, 2010 8:00 AM > To: rsyslog-users > Subject: Re: [rsyslog] 4.7: discard seems to not working > > Yup, you have only one discard, at the last action. I guess you meant: > > :msg, startswith, "seahorse-agent:" ~ > & ~ > :msg, startswith, "dbus-daemon:" ~ > & ~ > :msg, startswith, "gnome-keyring-daemon:" ~ > & ~ > :msg, startswith, "quota_ufs:" ~ > & ~ > > Rainer > > -----Original Message----- > > From: [email protected] [mailto:rsyslog- > > [email protected]] On Behalf Of Denny Schierz > > Sent: Thursday, November 04, 2010 7:59 AM > > To: [email protected] > > Subject: [rsyslog] 4.7: discard seems to not working > > > > hi, > > > > i want to delete some messages: > > > > :msg, startswith, "seahorse-agent:" ~ > > :msg, startswith, "dbus-daemon:" ~ > > :msg, startswith, "gnome-keyring-daemon:" ~ > > :msg, startswith, "quota_ufs:" ~ > > > > & ~ > > > > but it doesn't work: > > <client> ufs: [ID 708496 kern.notice] quota_ufs: over hard disk limit > > (pid 578,... > > > > <client> seahorse-agent[3085]: file seahorse-ssh-source.c: line > > ... > > > > is there any wrong with that? > > > > cu denny > > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
