When the "Test" button is pressed, it passes the test message on the "Test Setup" page to your Filter or Action. When testing filter settings; if the values for the field that you are testing against, do not match what is being passed by the test message, then it will show a red cross beside the "Test" button.

To fix this: you need to press the "Test Setup" button beside the "Test" button on the filter form. This will open up the "Test Message" form, which shows you all the values that you are passing to the filters when you press the "Test" button.

Change the value in the matching fields input box on the "Test Message" page, to match the value that you are filtering for. You should now be able to press the "Test" button and have it display a green tick. NB. This is an internal test only, and so may not work in the 'real world'.

For testing your filter setup; we recommend that you download a copy of Kiwi SyslogGen. This program allows you to send test syslog messages to Kiwi Syslog Daemon which is the ideal way to test your Rules.