Yep… can't do that, already tried (that was actually the first thing I tried before trying the method I outlined).
-- Gary F. On Mar 26, 2013, at 12:12 PM, Rainer Gerhards <[email protected]> wrote: > Ah , misunderstsnding: %...% is property replacer. You cannot use that > outside of templates. > > > Sent from phone, thus brief. > > > > -------- Ursprüngliche Nachricht -------- > Von: David Lang <[email protected]> > Datum: 26.03.2013 20:04 (GMT+01:00) > An: rsyslog-users <[email protected]> > Betreff: Re: [rsyslog] property replacer and regexps > > > Gary, I thought to set the contents of $!foo you had to use something like > like: > > set $!var = "something" > > so wouldn't what you are trying be: > > set $!foo = "%msg:R,ERE,0,DFLT:rg_counter--end% > > note $!foo on the left side and msg on the right side. > > David Lang > > On Tue, 26 Mar 2013, Gary Foster wrote: > >> Date: Tue, 26 Mar 2013 11:58:58 -0700 >> From: Gary Foster <[email protected]> >> Reply-To: rsyslog-users <[email protected]> >> To: rsyslog-users <[email protected]> >> Subject: Re: [rsyslog] property replacer and regexps >> >> Ok, it's not just a % escape issue after all (sorry for the continued >> followup >> spammage), because even this line causes a config error: >> >> %$!foo:R,ERE,0,DFLT:rg_counter--end% >> >> which should, if I understand correctly, put the entire contents of $msg in >> $!foo but instead fails to load with a config error. >> >> -- Gary F. >> >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T >> LIKE THAT. >> > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
