[rsyslog-notify] Forum Thread: Re: Filtering messages using RainerScript - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26374#p26374

Message: 
----------
[quote:1rkakeuj]$msg contains ("DROP" and ("SRC=192.168.90.11" or
"224.0.0.251")) [/quote:1rkakeuj]
This is not valid syntax

run rsyslogd -N2 and it will show you where syntax errors are

you would need to do something like 
$msg contains("DROP") and ($msg contains( "SRC=192.168.90.11") or $msg
contains( "224.0.0.251"))