filtering out keepalived messages in syslog-ng

[Errtu]

Hi,


I was wondering if it would be possible to filter out the numerous debug messages from /var/log/messages and place them in their own (for example: /var/log/keepalived.log) logfile.

I've tried to add some lines:

# keepalived
destination keepalived { file("/var/log/keepalived.log"); };
filter f_keepalived { facility(keepalived); };
log { source(src); filter(f_keepalived); destination(keepalived); };


But i get the error "Warning: unknown facility" upon boot.

Is it possible?


thanks,

Errtu

[Errtu]

No longer necessary, as i've switched (back) from keepalived to heartbeat/ldirectord.


However, i am curious about the filtering capabilities of syslog-ng. In case somebody has a bight idea, please let me know either in this thread (which i'll probably stop watching after some time) or via pm.