Configuring multiple syslog filters
Has anyone configured multiple syslog filters to different remote syslog server with different severity levels. Can we configure something like below
include " filter f_remote_audit1 { facility(local2) and level(notice) and match(\"AUDIT\"); }; destination d_remote_loghost1 { udp(\"192.168.1.34\" port(514)); }; log { source(s_syslog_pipe); filter(f_remote_audit1); destination(d_remote_loghost1); }; filter f_remote_audit2 { facility(local0) and level(warn); }; destination d_remote_loghost2 { udp(\"172.16.1.34\" port(514)); }; log { source(s_syslog_pipe); filter(f_remote_audit2); destination(d_remote_loghost2); }; "