Cyclades AlterPath ACS, Справочник по командам

Страница: 182 / 420

166
Administration
Some Examples of Defining Filters:
1) To filter by facility:
filter f_facilty { facility(<facility name>); };
Examples:
filter f_daemon { facility(daemon); };
filter f_kern { facility(kern); };
filter f_debug { not facility(auth, authpriv, news, mail); };
2) To filter by level:
filter f_level { level(<level name>);};
Examples:
filter f_messages { level(info .. warn)};
filter f_emergency { level(emerg); };
filter f_alert { level(alert); };
3) To filter by matching one string in the received message:
filter f_match { match(‘string’); };
Example to filter by matching the string “named”:
filter f_named { match(‘named’); };
4) To filter ALARM messages (note that the following three examples should
be one line):
pro-
gram(<string>) Tries to match the <string> to the program name field of
the log message.
host(<string>) Tries to match the <string> to the hostname field of the
log message.
match(<string>
) Tries to match the <string> to the message itself.
Table 5-3: “Filters” parameters (Syslog-ng configuration)
Option Description