Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

This is the line i have:

*.=emerg,crit,alert,error @@syslogserver:1468

What i'm receiving is all messages. Is there anything wrong with this syntax?

share|improve this question
    
Are you using sysklogd, syslog-ng or rsyslog? –  mgorven Jun 8 '12 at 0:09
    
I'm using rsyslog –  Chris Jun 8 '12 at 12:47

1 Answer 1

I don't use rsyslog, but it claims to faithfully reimplement the sysklogd config format. In that, commas do not separate priorities, only facilities; you can do daemon,kern.info as a shorthand for daemon.info,kern.info (as a consequence, daemon.emerg,kern.info would silently drop the priority spec for the former). To separate facility.priority pairs, use a semicolon; to list multiple priorities, either specify multiple pairs (in ascending order: *.=err;*.=crit;*.=alert;*.=emerg) or just use the default "specified priorities and higher" behaviour: *.err will match all messages at or above LOG_ERR, from all facilities.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.