[rsyslog-notify] Forum Thread: Re: rsyslog is duplicating messages and ignoring my filter r - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25242#p25242

Message: 
----------
the various filters are processed in order, so the message has already been
delivered to /var/log/messages etc before it gets down to the lines that
write it to the oracle_audit.log file and throw it away. move that section
up above the other filters and I think you will get the results you are
looking for.