> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Denny Schierz > Sent: Thursday, November 04, 2010 10:39 AM > To: rsyslog-users > Subject: Re: [rsyslog] 4.7: discard seems to not working > > hi, > > it seems, that was it: > > Am Donnerstag, den 04.11.2010, 08:00 +0100 schrieb Rainer Gerhards: > > > :msg, startswith, "seahorse-agent:" ~ > > & ~ > > :msg, startswith, "dbus-daemon:" ~ > > & ~ > > :msg, startswith, "gnome-keyring-daemon:" ~ > > & ~ > > :msg, startswith, "quota_ufs:" ~ > > & ~ > > now it works, only I did not understand, why for example: > > :msg, startswith, "dbus-daemon:" ~ > > or: > > :msg, contains, "dbus-daemon:" ~ > > doesn't work.
Sorry, I guess you didn't get my second mail. I screwed up, this should not make any difference at all! > I had to search for something in the text. So, if there > some more messages from dbus, the first or second example aren't > successful: > > a sample message: > > Nov 4 10:03:42 client79 dbus-daemon: Rejected send message, 3 matched > rules; type="method_call", sender=":1.16" (uid=14326 pid=3104 > comm="nautilus --no-default-window --sm-client-id defaul") > interface="org.freedesktop.SystemToolsBackends" member="get" error > name="(unset)" requested_reply=0 > destination="org.freedesktop.SystemToolsBackends" (uid=0 pid=2859 > comm="/usr/bin/system-tools-backends ")) > > any suggestions? Can you add *.* /paht/to/debug.log;RSYSLOG_DebugFormat and let us know what the debug format says for those messages that do not work. Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
