[rsyslog] mixing Property-Based Filters

[theinric@redhat.com]

Jan-Frode Myklebust wrote:
> Is it possible to mix several property based filters to f.ex. filter
> out that all programname=httpd from hostname=webserver is logged to
> a specific file ?
>
> Alternatively that all facility=local2 from hostname=webserver is
> logged to a specific file ?
>
>
>
>   -jf
>
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog

Property based filters can currently handle only one condition each.
What you're asking for can be done using host and tag selectors:

!httpd
+webserver
*.* /var/log/webserver-httpd.log
+*
!*

...

+webserver
=local2.* /var/log/webserver-local2
+*