On Tue, 31 Jan 2017, [email protected] wrote:


Hello i have make this filter:     if $fromhost-ip == "11.11.11.11" then {     if 
$programname == "mysql" then       action(type="omfile"
file="/va     else       action(type="omfile"
file="/va  }     This work fine but in /var/log/syslog.log  entries shows up
again, and I do not want it. When I add “& stop” after } rsyslog wont start 
    What I have wrong?

as you see above, this didn't come through cleanly.

But my guess is that you have multiple filters that match the same log message, so the message gets written to all outputs. This is how things are intended to work.

If you want to stop processing filters after some condition is matched, you can put the 'stop' statement in and no filters afer that point will be processed.

David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to