diff --git a/usr.sbin/syslogd/syslog.conf.5 b/usr.sbin/syslogd/syslog.conf.5 --- a/usr.sbin/syslogd/syslog.conf.5 +++ b/usr.sbin/syslogd/syslog.conf.5 @@ -448,6 +448,31 @@ is removed and .Ql # is treated as an ordinary character. +.Ss USING MULTIPLE SELECTORS +Multiple selectors in a single entry act as a union of match conditions. +Each +.Em facility.level +pair is evaluated independently, and any message that matches +any one of the selectors will be handled by the corresponding action. +.Pp +Consider the following combination of selectors: +.Bd -literal -width offset +mail.crit,*.err +.Ed +.Pp +The combination of these selectors will select: +.Pp +.Bl -tag -width offset +.It +All messages from the mail facility at level crit or higher +(i.e., crit, alert, emerg) +.It +Any message from any facility (*) at level err or higher +(err, crit, alert, emerg) +.El +.Pp +With this combination, a message from mail at level err will +match *.err and be logged, even though it doesn’t meet mail.crit. .Sh PROPERTY-BASED FILTERS .Em program , .Em hostname @@ -608,19 +633,6 @@ .Xr syslog 3 , .Xr syslogd 8 .Sh BUGS -The effects of multiple -.Em selectors -are sometimes not intuitive. -For example -.Dq mail.crit,*.err -will select -.Dq mail -facility messages at the level of -.Dq err -or higher, not at the level of -.Dq crit -or higher. -.Pp In networked environments, note that not all operating systems implement the same set of facilities. The facilities