Hello everyone, How can I go about writing a decoder/rule to send me an email every time a log entry like this is registered?
"Vitor Correia" "PT" 89.155.91.201 - - [21/Oct/2010:01:48:13 +0100] "GET /collect/main/ HTTP/1.1" 200 2970 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.11) Gecko/20101012 Firefox/3.6.11" I'm interested in catching the bit which says "PT", that will be the bit that will always appear. Thanks in advance. Vitor Correia
