I am not sure you can have multiple triggers? How about something like this
trigger diff-bkp-mx-dom|kernel
i tried it:
[freebsd] log:/var/log/maillog:10240 file:/usr/local/bin/bash:md5 log:/var/log/messages:10240
[baldo.tou.nu] file:/usr/local/bin/bash:md5 log:/var/log/messages:10240 trigger kernel|diff-bkp-mx-dom log:/var/log/maillog:10240 ignore spamd trigger deferred
and
HOST=baldo.tou.nu LOG %/var/log/messages kernel COLOR=yellow LOG %/var/log/messages %(I/O|read).error COLOR=red
Unfortunately, there is the same result :
System logs at Tue Jul 25 20:18:36 CEST 2006
No entries in /var/log/messages
No entries in /var/log/maillog
Full log /var/log/messages Jul 25 19:48:32 baldo sudo: hobbit : TTY=unknown ; PWD=/usr/home/hobbit/client ; USER=root ; COMMAND=/usr/bin/netstat -i -b -n Jul 25 19:48:32 baldo sudo: hobbit : TTY=unknown ; PWD=/usr/home/hobbit/client ; USER=root ; COMMAND=/usr/bin/netstat -s [...]
Full log /var/log/maillog Cannot open logfile /var/log/maillog : Permission denied
Regards, nicolas