hi, it seems, that was it:
Am Donnerstag, den 04.11.2010, 08:00 +0100 schrieb Rainer Gerhards: > :msg, startswith, "seahorse-agent:" ~ > & ~ > :msg, startswith, "dbus-daemon:" ~ > & ~ > :msg, startswith, "gnome-keyring-daemon:" ~ > & ~ > :msg, startswith, "quota_ufs:" ~ > & ~ now it works, only I did not understand, why for example: :msg, startswith, "dbus-daemon:" ~ or: :msg, contains, "dbus-daemon:" ~ doesn't work. I had to search for something in the text. So, if there some more messages from dbus, the first or second example aren't successful: a sample message: Nov 4 10:03:42 client79 dbus-daemon: Rejected send message, 3 matched rules; type="method_call", sender=":1.16" (uid=14326 pid=3104 comm="nautilus --no-default-window --sm-client-id defaul") interface="org.freedesktop.SystemToolsBackends" member="get" error name="(unset)" requested_reply=0 destination="org.freedesktop.SystemToolsBackends" (uid=0 pid=2859 comm="/usr/bin/system-tools-backends ")) any suggestions? cu denny
signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
