Moemen, Am 30.01.2018 um 15:52 schrieb Moemen MHEDHBI: > In fact you can use log format variables in actions also. After looking > to the code and docs, I think you can use log format variables whenever > you have <fmt> in the docs, ex: > add-header <name> <fmt> > set-query <fmt> > etc
That makes sense. For posterity I'd like to expand this: There also is <key fmt> and <value fmt> (so one probably should grep for `fmt>`, without the leading `<`. Sample fetches seem to be denoted by `<expr>` (set-var, set-<src|dst>[-port]) and are also available in ACLs of course. Thank you. Best regards Tim Düsterhus
