2014-12-06 22:07 GMT+01:00 rmkml <[email protected]>: > Hello, > > First, thx you for great project! > > Anyone known how to regexp filter on "new" rsyslog conf filter format > please ? > > ok it's work with "previous" filter format like this: > :msg, regex, " processed=[0-9]+" action(type="omfile" > file="/var/log/messages") > > but not work with "new" filter format like this: > if $msg regex " processed=[0-9]+" then action(type="omfile" > file="/var/log/messages") > > If not exist, are you planned in futur release please ? > (regex or ereregex) > > I guess you mean the re_match() function:
http://www.rsyslog.com/doc/rainerscript.html HTH Rainer > I'm interested for "mix" more than one filter like this: > if $fromhost-ip == '127.0.0.1' and $msg regex " processed=[0-9]+" and ... > then action(type="omfile" file="/var/log/messages") > > Tested on rsyslog v8.6.0 and v7.4.4. > > Regards > @Rmkml > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
