syslog-ng Premium Edition 7.0.33 - Administration Guide

Description: Match messages by using a regular expression against the program name field of log messages.

Description: Select messages of a source statement. This filter can be used in embedded log statements if the parent statement contains multiple source groups — only messages originating from the selected source group are sent to the destination of the embedded log statement.

Description: Select messages labeled with the specified tag. Every message automatically has the tag of its source in .source.<id_of_the_source_statement> format. This option is available only in syslog-ng 3.1 and later.

source s_tcp {
    network(ip(192.168.1.1) port(1514) tags("tcp", "router"));
};

filter f_tcp {
    tags(".source.s_tcp");
};

filter f_router {
    tags("router");
};

filter f_tag_filter {tags(".classifier.system");};

To skip the processing of a message without sending it to a destination, create a log statement with the appropriate filters, but do not include any destination in the statement, and use the final flag.

filter demo_debugfilter { level(debug); };
log { source(s_all); filter(demo_debugfilter); flags(final); };