What theinric posts is the current work-around for this situation.

There is nothing I can add to it - except some insight into the future
plans: we plan to support full boolean expression trees of any
complexity. However, the future enhanced config file format must be
fixed first (see my blog at http://rgerhards.blogspot.com). Also, some
internal workings must be changed. So I'd say that boolean expressions
will become available in the late fall, winter time frame (actually it
looks more like winter). I may be wrong here - a real schedule can only
be done when the design for 3.0 is mostly finished, which is not as of
now. (BTW: any feedback and suggestions are highly appreciated).

I hope this extra information is helpful. And, yes, maybe some very
helpful and skilled volunteer might jump in and implement the feature in
an instant - this has happend in the past and I have to admit that I
like these kind of changes to the "official" (what's that?;)) schedule.

Rainer 

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> [EMAIL PROTECTED]
> Sent: Wednesday, August 29, 2007 3:30 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] mixing Property-Based Filters
> 
> Jan-Frode Myklebust wrote:
> > Is it possible to mix several property based filters to f.ex. filter
> > out that all programname=httpd from hostname=webserver is logged to
> > a specific file ?
> >
> > Alternatively that all facility=local2 from hostname=webserver is
> > logged to a specific file ?
> >
> >
> >
> >   -jf
> >
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> 
> Property based filters can currently handle only one condition each.
> What you're asking for can be done using host and tag selectors:
> 
> !httpd
> +webserver
> *.* /var/log/webserver-httpd.log
> +*
> !*
> 
> ...
> 
> +webserver
> =local2.* /var/log/webserver-local2
> +*
> 
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> 
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog

Reply via email to