Still looking for help on this. As I said I need REGEX syntax (including 
characters that might need escaping) and didn't see anything helpful in the 
online docs.

Thanks,
 Chris Bartram


"The purpose of life is not to be happy. It is to be useful, to be honorable, 
to be compassionate, to have it make some difference that you have lived and 
lived well". (Ralph Waldo Emerson)

--------------------------------------------
On Wed, 11/27/13, Chris Bartram <[email protected]> wrote:

 Subject: [rsyslog] regex filter syntax for v7
 To: "rsyslog-users" <[email protected]>
 Date: Wednesday, November 27, 2013, 12:24 AM
 
 
 Can someone provide me an example of a working regex (has to
 be regex) filter I can use in my v7 rsyslog.conf on a RHEL5
 server to ignore/drop messages meeting a specific
 expression?
 
 Examples I've tried didn't work; and I see notes in other
 forums about needing to double-escape characters in the
 regex?
 
 **It would be extra helpful if the regex example could use
 perl-like syntax? something likeĀ  ^kernel\[\d+\] XYZ
 
 Thanks!
 -Chris Bartram 
 
 
 "The purpose of life is not to be happy. It is to be useful,
 to be honorable, to be compassionate, to have it make some
 difference that you have lived and lived well". (Ralph Waldo
 Emerson)
 _______________________________________________
 rsyslog mailing list
 http://lists.adiscon.net/mailman/listinfo/rsyslog
 http://www.rsyslog.com/professional-services/
 What's up with rsyslog? Follow https://twitter.com/rgerhards
 NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED
 by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE
 and DO NOT POST if you DON'T LIKE THAT.
 
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to