Hi,
I would ignore/delete/remove events that match, for exemple, 'MACFLAP_NOTIF' in message field.
Possible or not ?
Thanks
ps : Kiwi Syslog 9.4.0 Full version.
In your rule create a filter using the Message Text field. Then select the Filter Type "Complex". In the Exclude field you can add the text to be matched and then ignored.