hi, I have solved it using these two filters:
f $programname == 'cfagent' and $msg contains 'rsync' then ~ if $syslogtag startswith 'cfengine' and $msg contains 'rsync' then ~ I need to have both or it won't filter. Strange. -- groet, natxo _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
