[rsyslog-notify] Forum Thread: Re: Trying to split pound logs into two files: HTTP and erro - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25957#p25957

Message: 
----------
samples of logs you expect to show up in each place would help

personally, I prefer to overdo the use of () to make it clear what the
intent is and not rely on operator priority, so I would try writing the
second test as:

if $programname == 'pound' and (not ($msg contains 'HTTP')) then

also do rsyslogd -N2 to check that there are no syntax errors in the config
file.