From owner-freebsd-questions@FreeBSD.ORG Thu Jul 22 01:19:53 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 13D96106564A for ; Thu, 22 Jul 2010 01:19:53 +0000 (UTC) (envelope-from bergdave55@yahoo.com) Received: from web120416.mail.ne1.yahoo.com (web120416.mail.ne1.yahoo.com [98.138.85.223]) by mx1.freebsd.org (Postfix) with SMTP id D1B058FC08 for ; Thu, 22 Jul 2010 01:19:52 +0000 (UTC) Received: (qmail 90035 invoked by uid 60001); 22 Jul 2010 00:53:12 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1279759992; bh=MRdvCN2CKMMX2GfM3QcB3wfkhy0WTo1eVEjkEtS3Tto=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=6AywiReq+7ig0lQBP15ca9MkMxluZSg8B4LfEUnV4uM6NlA1iAKf8HavRodchTR84amKOU/Qk5mjaO1tyR1GieTSGWe4FiXu9roHpu2GzeoMzVIe4WpieTYmofkumYYSPiDX7xSlnB0e4jN5b8LaSwcKwPjOpJ5R+WyOonHdT1o= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=qxTMuXrWjEEE6mR7yTg91gw8ONymCB0+9BG3Fah0xnAn09hpu6A2A8zmD1YRgaXgUjClEirrmDrOV3+LIAY2XnECoRlZRavAk67xgYO/rHWlvf9i3zt4fqDvWhnB53hXqeHUDJVwh5bmXF4zDbDkLh1ASmsP1p3pZ7CeOB0En/A=; Message-ID: <167011.83792.qm@web120416.mail.ne1.yahoo.com> X-YMail-OSG: cozwlA4VM1mxNpiaCWuOU1.ClOQw1Tue8_xF0_Ip0fQnQiv sPSyLYfbLo99ig2UIh4Q9pzlDuFX1KjXwCdnz.5sNkVavEwF5rP2ytORxegL 0TBZlBnLm9SmmijZUT_N9Cz3ID0Y0sNUOEhLa0OpAbnPVBwl0rWhBYRgr0kF x8Pk.eduiBPkQaN3yU28YThjdHSUMInumWpq.eA-- Received: from [64.81.102.107] by web120416.mail.ne1.yahoo.com via HTTP; Wed, 21 Jul 2010 17:53:12 PDT X-Mailer: YahooMailRC/420.4 YahooMailWebService/0.8.104.276605 Date: Wed, 21 Jul 2010 17:53:12 -0700 (PDT) From: Dave Berg To: freebsd-questions@freebsd.org MIME-Version: 1.0 X-Mailman-Approved-At: Thu, 22 Jul 2010 04:18:05 +0000 Content-Type: text/plain; charset=us-ascii X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: remote syslog program specification question X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Jul 2010 01:19:53 -0000 Hi, I've set up remote syslog, and want to have a program specification that will send some messages to the remote server. Right now, I've got the usual 'send everything to the loghost' in syslog.conf: *.* @loghost and what I want to do is: send everything from any facility.level to the loghost EXCEPT things from $program that's level .info or lower. (so anything that's from $program.notice or higher goes to the log server. This is probably blindingly obvious, but I'm too sober to figure it out. Thanks!