I have recently learned that the current version of syslog only allows for one IP range filter per rule, even though the gui allows a user to add multiple. When multiple are added none of the IP filtering works at all. I did think this was a bug of some sort as the application looks to be set up to allow this. Unfortunately I was informed by a support tech that it is not a considered a bug even though it is not a documented limitation in the help files.
I would like to submit a feature request to allow adding multiple IP address range filters and or IP subnet mask filters to a single rule. This will allow for simpler management of rules and filters to help meet the requirements to split systems into different log files. This is specifically helpful for environments with large numbers of diverse subnets that make the current methods of one IP filter per rule complicated to implement.
Vote this up it will make the product much more user friendly!
Thanks!