Re: Multiple patterns for matching within socklog?

On Mon, Jan 02, 2006 at 05:18:13PM +0000, Lloyd Zusman wrote:
> If I'm using these filters and I then want to send the same info to
> stderr, will the non-stderr filters be in effect at the time I issue
> the 'e' and 'E' filters, or do I have to repeat the same filtering
> patterns for the stderr rules?  In other words, if after all this
> "imap" and "pop" filtering is done, I want to send lines with the
> string "error" in them to stderr, which is correct, option "A" or
> option "B"?

De/selecting log messages for logs doesn't affect de/selecting log
messages to be printed to stderr and vice versa.

> option B:
>   -*
>   +mail.*
>   -mail.*:*:*:*imap*
>   -mail.*:*:*:*pop*
>   E*
>   email.*
>   Email.*:*:*:*imap*
>   Email.*:*:*:*pop*
>   e*:*:*:*error*

This one.  You can remove the 'E*' line though, while initially all
messages are selected to be printed to a log, all messages initially
are deselected to be printed to stderr.

Regards, Gerrit.