I've been trying to get a basic regex to work in the regex tester at:
http://www.rsyslog.com/user-regex.php
\.[0-9]{1,3}
I'm using this regex to match one octet in this message:
Killing attempted connection: tcp (192.168.129.13:48351 -
192.168.145.91:35500)
This should return 6 matches that can be accessed by changing the position
fied from 0 to the field I want. in both rsyslog and the testing link, this
is not the case.
%msg:R,ERE,0,DFLT:\.[0-9]{1,3}--end%
Is this a bug, or am I misunderstanding how this should behave?
Nathanael
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
