[rsyslog-notify] Forum Thread: Re: filtering out specific messages - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24444#p24444

Message: 
----------
no, it's not that the ommysql is taking priority, it's that CROND doesn't
appear in the msg part of the log, it appears in the programname part of
the log.

write messages with the format RSYSLOG_DebugFormat and you will see how the
raw message is broken out into the different variables

*.* /var/log/debuglog;RSYSLOG_DebugFormat

then change your filter to be:

:programname, isequal, "CROND" ~

(isequal is significantly faster than contains)

David Lang