I believe syslog-ng will do what you want, We use it extensively just not with filters. Will take some experimentation to get it working the way you want. https://syslog-ng.com/documents/html/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-filters.html ... View more