Article on message correllation
Tuesday, February 1, 2011 @ 06:02 PM Author: Balázs Scheidler
There’s a good writeup on syslog-ng correllation functions on LWN. Since it is currently for subscriber’s only, here’s a link that you can use to see until it is published.
http://lwn.net/SubscriberLink/424459/dc2ec3fee7d80d3b/
LWN is a great publication by the way, so consider subscribing if you can.
