The change to md_syslog has broken graphdefang-0.9.
This patch (to graphdefang) should fix it. Please let me know.
Regards,
David.
diff --git a/contrib/graphdefang-0.9/event/mimedefang.pl/general
b/contrib/graphdefang-0.9/event/mimedefang.pl/general
index 1a82479..080211b 100644
--- a/contrib/graphdefang-0.9/event/mimedefang.pl/general
+++ b/contrib/graphdefang-0.9/event/mimedefang.pl/general
@@ -11,7 +11,7 @@
$event{'mimedefang.pl'}{'general'} =
sub {
- if ($text =~ m/^MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/ ) {
+ if ($text =~
m/^[A-Za-z0-9]{14}:\s*MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/ ) {
# get values from regular expression
Hi David,
I was looking over this fix and thought that two small changes might be
in order.
First, I thought it might be a good idea to update the Changelog to
reflect the md_syslog change with QueueID: as a compatibility item.
Second, to handle logs in both the new and old format, perhaps something
like this regex is safer?:
m/^(?:[A-Za-z0-9]{14}:\s*)?MDLOG,\S+?,(\S+?),(\S*?),(\S*?),(.*?),(.*?),(.*)$/ )
{
Regards,
KAM
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID. You may ignore it.
Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
