Dan, On Tuesday, 2021-04-06 23:11:15 -0600, you wrote:
> ...
> log { source(src); destination(smb_logs); filter(samba); flags(final); );
According to the documentation at
https://support.oneidentity.com/technical-documents/syslog-ng-open-source-edition/3.30/administration-guide/56#TOPIC-1595065
the filter clause should be specified between source and destination.
Sincerely,
Rainer
