Hi, Note that $Tmp will be a field in your log. In case you are using structured output which lists all the fields, you may want to delete() it afterwards. On the other hand it should be possible to do without a temp field: Exec If (uc($Message) =~ /(MY UPPER CASE PATTERN)/) ...
Regards, Botond On Tue, 11 Jun 2013 14:09:48 +0000 Shawn French <[email protected]> wrote: > I've gotten around this limitation by making a temp variable, upper (or > lower) casing it, then running an all-upper (or lower) case regex. > > Exec $Tmp = uc($Message); \ > If ($Tmp =~ /(MY UPPER CASE PATTERN)/) ... > > Cheers, > Shawn > > > From: Mika Wanadoo [mailto:[email protected]] > Sent: Tuesday, June 11, 2013 4:24 AM > To: Botond Botyanszki > Cc: [email protected] > Subject: Re: [nxlog-ce-users] Case sensitive/insensitive into regexp > > Botond, > is there any workaround to achieve this ? With internal language or Exec > statement ? > Regards, > Mikael > > On Mon, Jun 10, 2013 at 1:02 PM, Botond Botyanszki > <[email protected]<mailto:[email protected]>> wrote: > Hi, > > Case insensitive mode for regexp matching is not supported currently, this > is a planned feature. > > Regards, > Botond > > On Mon, 10 Jun 2013 11:47:36 +0200 > Mika Wanadoo <[email protected]<mailto:[email protected]>> > wrote: > > > Hi all, > > > > I just wanted to know if it's possible to define regexp in "case > > insensitive" mode ? > > Here is my conf : > > > > define KEEP /(pattern1|Pattern2|paTTern3)/ > > Exec ( $raw_event !~ %KEEP% ) drop(); > > > > How can I make the Exec statement case insensitive so nxlog deletes > > raw_event not containing pattern1 pattern2 and pattern3 ? > > Thanks for answers > > Mikael > ------------------------------------------------------------------------------ > How ServiceNow helps IT people transform IT departments: > 1. A cloud service to automate IT design, transition and operations > 2. Dashboards that offer high-level views of enterprise services > 3. A single system of record for all IT processes > http://p.sf.net/sfu/servicenow-d2d-j > _______________________________________________ > nxlog-ce-users mailing list > [email protected]<mailto:[email protected]> > https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users > ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ nxlog-ce-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
