Hi, Is-it possible to use variable in rsyslog?
We have a rsyslog server that collects events from windows servers. Some events from windows are about tmp files that we don't need in our rsyslog server. For one tmp file there is many events but the name of the file is not shown in all events. The only way I know to related all events to one tmp file is by the handle ID. I can filter the event for tmp file base on a regex for the file name. In rsyslog, does it have a way to extract a string from a rawmsg and assign it to a variable to be used by another filter to filter the related events to this tmp file? I hope I am clear enough. By the way, my version of rsyslog is 4.2.0. Thanks, Bernard _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
