http://bugzilla.novell.com/show_bug.cgi?id=593699 http://bugzilla.novell.com/show_bug.cgi?id=593699#c6 --- Comment #6 from Marius Tomaschewski <mt@novell.com> 2010-04-28 17:10:19 UTC --- The following filter should do the job: if ( \ /* kernel up to warning except of firewall */ \ ($syslogfacility-text == 'kern') and \ ($syslogseverity <= 4 /* warning */ ) and not \ ($msg contains 'IN=' and $msg contains 'OUT=') \ ) or ( \ /* up to errors except of facility authpriv */ \ ($syslogseverity <= 3 /* errors */ ) and not \ ($syslogfacility-text == 'authpriv') \ ) \ then /dev/tty10;RSYSLOG_TraditionalFileFormat & |/dev/xconsole;RSYSLOG_TraditionalFileFormat -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.