I am not sure you can have multiple triggers? How about something like
this
trigger diff-bkp-mx-dom|kernel
i tried it:
[freebsd]
log:/var/log/maillog:10240
file:/usr/local/bin/bash:md5
log:/var/log/messages:10240
[baldo.tou.nu]
file:/usr/local/bin/bash:md5
log:/var/log/messages:10240
trigger kernel|diff-bkp-mx-dom
log:/var/log/maillog:10240
ignore spamd
trigger deferred
and
HOST=baldo.tou.nu
LOG %/var/log/messages kernel COLOR=yellow
LOG %/var/log/messages %(I/O|read).error COLOR=red
Unfortunately, there is the same result :
System logs at Tue Jul 25 20:18:36 CEST 2006
No entries in /var/log/messages
No entries in /var/log/maillog
Full log /var/log/messages
Jul 25 19:48:32 baldo sudo: hobbit : TTY=unknown ;
PWD=/usr/home/hobbit/client ; USER=root ; COMMAND=/usr/bin/netstat -i -b
-n
Jul 25 19:48:32 baldo sudo: hobbit : TTY=unknown ;
PWD=/usr/home/hobbit/client ; USER=root ; COMMAND=/usr/bin/netstat -s
[...]
Full log /var/log/maillog
Cannot open logfile /var/log/maillog : Permission denied
Regards,
nicolas