hello i found a syslog.conf manual on the net--to whatever syslogd package that may fit--that describes filters for 'programs' and 'hostnames', like:
# Save ftpd transactions along with mail and news !ftpd *.* /var/log/spoolerr The above to me would log everything execpt ftpd messages to /var/log/spoolerr. Wouldn't it be easier to just write: ftpd.*,mail.*,news.* /var/log/spoolerr # Save forwards from hostname +hostname *.* /var/log/hostname What are forwards in this case? what do you think? I think it sounds complicated, I've used syslogd for years and years and never saw a need for something like this. Could you explain to us what you are trying to solve exactly? You could easily solve this using M4 though.