[rsyslog] log *.*, except logs by "postgres"

[david at lang.hm]

On Fri, 19 Mar 2010, Tomasz Chmielewski wrote:

> Am 19.03.2010 00:23, david at lang.hm wrote:
>> On Fri, 19 Mar 2010, Tomasz Chmielewski wrote:
>> 
>>> Am 19.03.2010 00:08, david at lang.hm wrote:
>>> 
>>>> no,
>>>> 
>>>> :programname, :isequal, "postgres" ~
>>>> *.*;auth,authpriv.none -/var/log/syslog
>>>> 
>>>> each of these is a seperate statement. the ~ as a destination tells
>>>> rsyslog not to proceed further through the rules for this log entry.
>>> 
>>> Doesn't work for me.
>>> 
>>> If I put it like above, nothing gets appended to /var/log/syslog
>>> anymore (or any other defined log file).
>>> 
>>> rsyslogd is running as a process.
>>> 
>>> If it matters, I'm using 64 bit Debian Lenny (rsyslog 3.18.6).
>> 
>> try it with ' instead of " (I get those mixed up at least 50% of the
>> time, rsyslog accepts one and not the other and I can never remember
>> which one)
>
> OK, with ' it started to log again, but still postgres gets to both 
> /var/log/syslog and /var/log/postgresql/postgresql_log.
>
> So, not as expected.

what does the raw log message look like again?

David Lang