On RHEL 7, I have a filter: if $programname == "systemd" and ( $msg contains "Starting Session" or $msg contains "Started Session" ) then stop
which works fine. However under RHEL 8, I get invalid property 'programname' I think this is because BSD type filters are no longer supported, but I'm not sure how to change this to the new style. I don't see an example of how to make a compound filter: :programname, isequal, "systemd" stop I'm not sure where to add the msg filters in? Could someone point me to the correct documentation? Thanks! _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
