Still looking for help on this. As I said I need REGEX syntax (including characters that might need escaping) and didn't see anything helpful in the online docs.
Thanks, Chris Bartram "The purpose of life is not to be happy. It is to be useful, to be honorable, to be compassionate, to have it make some difference that you have lived and lived well". (Ralph Waldo Emerson) -------------------------------------------- On Wed, 11/27/13, Chris Bartram <[email protected]> wrote: Subject: [rsyslog] regex filter syntax for v7 To: "rsyslog-users" <[email protected]> Date: Wednesday, November 27, 2013, 12:24 AM Can someone provide me an example of a working regex (has to be regex) filter I can use in my v7 rsyslog.conf on a RHEL5 server to ignore/drop messages meeting a specific expression? Examples I've tried didn't work; and I see notes in other forums about needing to double-escape characters in the regex? **It would be extra helpful if the regex example could use perl-like syntax? something likeĀ ^kernel\[\d+\] XYZ Thanks! -Chris Bartram "The purpose of life is not to be happy. It is to be useful, to be honorable, to be compassionate, to have it make some difference that you have lived and lived well". (Ralph Waldo Emerson) _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

