whenever you have a filtering problem, the first thing to do is to write the
logs with the template RSYSLOG_DebugFormat
from that you can see what variables (i.e. properties) have what content and
then design your filters from there.
What does this show for one fo the logs you are interested in filtering?
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.