|
Line
Link Here
|
| 0 |
-- syslog-ng.conf.zorry 2009-11-05 17:23:23.000000000 +0100 |
0 |
++ syslog-ng.conf 2009-11-05 17:21:57.000000000 +0100 |
|
Lines 80-89
Link Here
|
| 80 |
filter f_crit { level(crit); }; |
80 |
filter f_crit { level(crit); }; |
| 81 |
filter f_err { level(err); }; |
81 |
filter f_err { level(err); }; |
| 82 |
|
82 |
|
| 83 |
filter f_avc { match(".*avc: .*"); }; |
83 |
filter f_avc { match("^\\[.*\\] .*avc: .*" value("MESSAGE")); }; |
| 84 |
filter f_audit { match("^audit.*") and not match(".*avc: .*"); }; |
84 |
filter f_audit { match("^\\[.*\\] audit.*" value("MESSAGE")) and not match(".*avc: .*" value("MESSAGE")); }; |
| 85 |
filter f_pax { match("^PAX:.*"); }; |
85 |
filter f_pax { match("^\\[.*\\] PAX:.*" value("MESSAGE")); }; |
| 86 |
filter f_grsec { match("^grsec:.*"); }; |
86 |
filter f_grsec { match("^\\[.*\\] grsec:.*" value("MESSAGE")); }; |
| 87 |
|
87 |
|
| 88 |
log { source(src); filter(f_authpriv); destination(authlog); }; |
88 |
log { source(src); filter(f_authpriv); destination(authlog); }; |
| 89 |
log { source(src); filter(f_syslog); destination(_syslog); }; |
89 |
log { source(src); filter(f_syslog); destination(_syslog); }; |
