try
if $fromhost-ip != "127.0.0.1" and not ($fromhost-ip == ['10.x.x.x','10.x.x.x','10.x.x.x']) then {
David Lang
On Wed, 6 Apr 2022, Brian Robertson via rsyslog wrote:
Date: Wed, 6 Apr 2022 17:57:38 +1200 (NZST)
From: Brian Robertson via rsyslog <rsyslog@lists.adiscon.com>
To: "rsyslog@lists.adiscon.com" <rsyslog@lists.adiscon.com>
Cc: Brian Robertson <brian-robert...@xtra.co.nz>
Subject: [rsyslog] Filters for not equal to a list of hostIP's
Hi There,
I'm trying to stop messages from certain hosts from being forwarded from my
syslog server but the filters seem to be stopping all forwarding rather than
just from the IP's I want.
This was the original filter I used:
if $fromhost-ip != "127.0.0.1" and not ($fromhost-ip contains
'10.x.x.x','10.x.x.x','10.x.x.x') then {
action(type="omfwd" Target="x.x.x.x" Port="514" Protocol="udp" )
I also tried this:
if ($fromhost-ip != "127.0.0.1" or $fromhost-ip != "10.x.x.x" or $fromhost-ip !=
'"10.x.x.x" or $fromhost-ip != "10.x.x.x") then {
action(type="omfwd" Target="x.x.x.x" Port="514" Protocol="udp" )
I've tried with single quotes and double quotes around the IP addresses but it
made no difference. Any suggestions on this?
Cheers
Brian
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
