I read the link , there is a sample as below , it requires to write a program , I don't know how to define variable $syslogfacility-text , how to use it in my case if I just would like to filter the messages which which contains the string "error1" or "error2" ?
if $syslogfacility-text == 'local0' and $msg startswith 'DEVNAME' and not ($msg contains 'error1' or $msg contains 'error0') then /var/log/somelog
I also added the below to the config file , just trying to skip the line which contains the word "ID-4711" , but it doesn't work , would advise what is wrong ?
msg, contains, "ID-4711"
Last edited by ust; 10-02-2013 at 03:40 AM.