Hi Peter, My scenario has the index as hostnames and to minimize the total amount of entries, a wildcard (in contrast with ‘contains’ if I wasn’t a lookup table) would be wonderful. Property replacer as I read don’t see to fit, unfortunately.
Regards, Alexandros From: Peter Viskup <[email protected]> Sent: Saturday, May 30, 2020 8:40 AM To: rsyslog-users <[email protected]> Cc: Naoum, A. (Alexandros) <[email protected]> Subject: Re: [rsyslog] lookup table wildcard Hi Alexandros, no, this is not supported. https://www.rsyslog.com/doc/master/configuration/lookup_tables.html<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rsyslog.com%2Fdoc%2Fmaster%2Fconfiguration%2Flookup_tables.html&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321190154&sdata=%2BFcdGUsfewGMk5keTF6OVKeSnLQY%2BkLQVTMPheh1iTk%3D&reserved=0> Consider having a look on property replacer with regular expressions https://www.rsyslog.com/doc/v8-stable/configuration/property_replacer.html<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rsyslog.com%2Fdoc%2Fv8-stable%2Fconfiguration%2Fproperty_replacer.html&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321200148&sdata=%2FFEe6FrgYz9SYmvSxbo8dOMuyUJk0GGnWwYgQGCbm7U%3D&reserved=0> -- Peter On Fri, May 29, 2020 at 5:38 PM Naoum, A. (Alexandros) via rsyslog <[email protected]<mailto:[email protected]>> wrote: Hello, I would like to ask, is it possible to have a lookup table with index something with wildcard? Example { "nomatch" : "none", "type" : "string", "table":[ {"index" : "foo*", "value" : "bar" }, {"index" : "barr*", "value" : "quux" }]} Regards, Alexandros This message (including any attachments) may contain confidential information. It is intended for use by the recipient only. Any dissemination, copying or distribution to third parties without the express consent of the sender is strictly prohibited. If you have received this message in error, please delete it immediately and notify the sender. Thank you for your collaboration. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.adiscon.net%2Fmailman%2Flistinfo%2Frsyslog&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321210145&sdata=ZTlTEqKbCxdn9g3BwyC5nzP%2BOI31HiWaiQPSM2vywt0%3D&reserved=0> http://www.rsyslog.com/professional-services/<https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.rsyslog.com%2Fprofessional-services%2F&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321210145&sdata=vX88X1D45rJ4f5rFmmxwPIXCQTN%2BcTTbqSj%2FwVWDcCI%3D&reserved=0> What's up with rsyslog? Follow https://twitter.com/rgerhards<https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Frgerhards&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321220140&sdata=N%2BD3TRdqNhYZuPwyUr8Qm8zGreQh49kXfsLgprtKhL4%3D&reserved=0> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. This message (including any attachments) may contain confidential information. It is intended for use by the recipient only. Any dissemination, copying or distribution to third parties without the express consent of the sender is strictly prohibited. If you have received this message in error, please delete it immediately and notify the sender. Thank you for your collaboration. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
