in 8.11 (R8-stable) documentation, we see under "Filter Conditions" http://www.rsyslog.com/doc/master/configuration/filters.html
“if” and “then” are fixed keywords that mus be present. “expr” is a (potentially quite complex) expression. So the expression documentation<http://www.rsyslog.com/doc/master/configuration/expression.html> for details. “action-part-of-selector-line” is an action, just as you know it (e.g. “/var/log/logfile” to write to that file). However, the "expression documentation" link is busted. Is there another location for this? The Rainer Script link does tell me some stuff, but I'm mainly interested in what the various "stock" variables are that are parsed out of the message header. Thx! _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

