From owner-freebsd-questions@FreeBSD.ORG Mon Apr 28 10:46:07 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8BACE37B401 for ; Mon, 28 Apr 2003 10:46:07 -0700 (PDT) Received: from perrin.int.nxad.com (internal.ext.nxad.com [69.1.70.251]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2B35043F93 for ; Mon, 28 Apr 2003 10:46:07 -0700 (PDT) (envelope-from sean@perrin.int.nxad.com) Received: by perrin.int.nxad.com (Postfix, from userid 1001) id BE74B20F01; Mon, 28 Apr 2003 10:46:06 -0700 (PDT) Date: Mon, 28 Apr 2003 10:46:06 -0700 From: Sean Chittenden To: questions@FreeBSD.org Message-ID: <20030428174606.GA28198@perrin.int.nxad.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i X-PGP-Key: finger seanc@FreeBSD.org X-PGP-Fingerprint: 3849 3760 1AFE 7B17 11A0 83A6 DD99 E31F BC84 B341 X-Web-Homepage: http://sean.chittenden.org/ Subject: Logging all messages but mail via syslog... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Apr 2003 17:46:07 -0000 I have a dedicated syslog machine that I use to collect syslog messages from all over the network. Instead of splitting up the log files manually, I'd like to have syslog do this for me. Right now I'm just using a normal *.* collection, but I'd like to filter out mail from everything else. I've tried every combination of: !=mail.* !=mail !mail !mail.* !-mail !-mail.* With *.* before and after using either ; or , to separate the two. This has to be possible... but what's the syntax? Is this just a case of ENOSLEEP and I'm missing it someplace in the man page? -sc -- Sean Chittenden