Use the new syntax. In pseudo code…
do_stop=0
if (a) {
action_a
do_stop=1
}
if (b) {
action_b
do_stop=1
}
if (do_stop) stop
> On Feb 5, 2021, at 23:47, Fourhundred Thecat via rsyslog
> <[email protected]> wrote:
>
> Hello,
>
> How can I filter messages that satisfy both conditions at the same time?
>
> :syslogtag, startswith, "dovecot" stop
> :msg, startswith, "imap-login " stop
>
> I am using rsyslog 8.1901.0-1 on Debian 10
>
> thanks,
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
