On Sat, 2005-03-05 at 13:01 -0600, Michael Sullivan wrote:
> I use syslog-ng along with a configuration I found at gentoo-wiki.com.
> It works pretty well.  As many of you know, I'm have a mailman problem
> I'm trying to solve currently.  I also have an inbox monitor that checks
> my mail server for new messages every ten seconds and evolution checks
> for new messages every minute.  As a result I have a lot of entries in
> my mail log that look like this:
> 
> Mar  5 12:56:06 bullet imap-login: Login: michael [192.168.1.3]
> 
> Is it possible to syslog-ng ignore these entries until further notice?
> If so, how would I accomplish it?


This should help you of sorts

destination black_hole { file("/dev/null"); };

filter f_imap_login_michael {
        program("imap-login")
        and match ("michael");
};

log { 
        source (src);
        filter(f_imap_login_michael); 
        destination(black_hole); 
};



-- 
Ow Mun Heng
Gentoo/Linux on DELL D600 1.4Ghz 
98% Microsoft(tm) Free!! 
Neuromancer 16:44:35 up 7:44, 6 users, load average: 0.41, 0.54, 0.45 


--
[email protected] mailing list

Reply via email to