Syslog include match granularity?

Hi JC,

What are the symptoms of the failure? Does syslog-ng start? If so, what happens/what doesn't happen that you expect to?

Can you try clearing your existing syslog include config using 'b syslog include none' and then create a file named /var/tmp/syslog.test.inc which contains the following:

 
 syslog include " 
  
 destination d_loghost { 
  udp(\"172.22.X.X\" port(514)); 
  udp(\"172.24.X.X\" port(514)); 
 }; 
 filter f_pool_member { 
  match(\"Pool member\"); 
 }; 
 filter f_jc_not_6 { 
  not facility(local6); 
 }; 
 log { 
  source(local); 
  filter(f_pool_member); 
  filter(f_jc_not_6); 
  destination(d_loghost); 
 }; 
 " 
 

The run bpsh < /var/tmp/syslog.test.inc

If that works, save the change from memory to file using 'b save'.

Thanks,

Aaron