tags 322570 pending
thanks
On Thu, 18 Aug 2005, Martin Lohmeier wrote:
> maximilian attems wrote:
>
> | please post some loglines that above rules suppress so we can test on
> them.
>
> see attachment.
>
> | don't use '.*' i guess a vaild username is [_[:alnum:]-]+
>
> Yes, this is a username. I used '.*' because the username could contain
> some special characters like '@', '-', '_' and '.' .... maybe you add
> this 4 characters to the regex.
>
> | as soon as both points are covered i'll add your rule to current cvs.
>
> by, Martin
ok, thanks add the 2 attached rules to current cvs.
please test them on your setup.
--
maks
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ HORDE\[[0-9]+\]: \[horde\] Login success for
[EMAIL PROTECTED]:alnum:]-]+ \[[.0-9]{7,15}\] to Horde \[on line [0-9]+ of
".+"\]$
^\w{3} [ :0-9]{11} [._[:alnum:]-]+ HORDE\[[0-9]+\]: \[horde\] User [EMAIL
PROTECTED]:alnum:]-]+ \[[.0-9]{7,15}\] logged out of Horde \[on line [0-9]+ of
".+"\]$