Consider opening feature request on rsyslog's GitHub in that case. On Mon, Jun 1, 2020 at 9:21 AM Naoum, A. (Alexandros) < [email protected]> wrote:
> Hi Peter, > > > > My scenario has the index as hostnames and to minimize the total amount of > entries, a wildcard (in contrast with ‘contains’ if I wasn’t a lookup > table) would be wonderful. > > Property replacer as I read don’t see to fit, unfortunately. > > > > > > Regards, > > Alexandros > > > > *From:* Peter Viskup <[email protected]> > *Sent:* Saturday, May 30, 2020 8:40 AM > *To:* rsyslog-users <[email protected]> > *Cc:* Naoum, A. (Alexandros) <[email protected]> > *Subject:* Re: [rsyslog] lookup table wildcard > > > > Hi Alexandros, > > no, this is not supported. > > https://www.rsyslog.com/doc/master/configuration/lookup_tables.html > <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rsyslog.com%2Fdoc%2Fmaster%2Fconfiguration%2Flookup_tables.html&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321190154&sdata=%2BFcdGUsfewGMk5keTF6OVKeSnLQY%2BkLQVTMPheh1iTk%3D&reserved=0> > > > > Consider having a look on property replacer with regular expressions > > https://www.rsyslog.com/doc/v8-stable/configuration/property_replacer.html > <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.rsyslog.com%2Fdoc%2Fv8-stable%2Fconfiguration%2Fproperty_replacer.html&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321200148&sdata=%2FFEe6FrgYz9SYmvSxbo8dOMuyUJk0GGnWwYgQGCbm7U%3D&reserved=0> > > > > -- > > Peter > > > > On Fri, May 29, 2020 at 5:38 PM Naoum, A. (Alexandros) via rsyslog < > [email protected]> wrote: > > > Hello, > > I would like to ask, is it possible to have a lookup table with index > something with wildcard? > > Example > > { "nomatch" : "none", > "type" : "string", > "table":[ > {"index" : "foo*", "value" : "bar" }, > {"index" : "barr*", "value" : "quux" }]} > > > Regards, > Alexandros > > This message (including any attachments) may contain confidential > information. It is intended for use by the recipient only. Any > dissemination, copying or distribution to third parties without the express > consent of the sender is strictly prohibited. If you have received this > message in error, please delete it immediately and notify the sender. Thank > you for your collaboration. > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.adiscon.net%2Fmailman%2Flistinfo%2Frsyslog&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321210145&sdata=ZTlTEqKbCxdn9g3BwyC5nzP%2BOI31HiWaiQPSM2vywt0%3D&reserved=0> > http://www.rsyslog.com/professional-services/ > <https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.rsyslog.com%2Fprofessional-services%2F&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321210145&sdata=vX88X1D45rJ4f5rFmmxwPIXCQTN%2BcTTbqSj%2FwVWDcCI%3D&reserved=0> > What's up with rsyslog? Follow https://twitter.com/rgerhards > <https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Frgerhards&data=02%7C01%7Calexandros.naoum%40nn.cz%7C1412f3cbe21d477a306e08d80464580a%7Cfed95e698d7343feaffba7d85ede36fb%7C1%7C0%7C637264176321220140&sdata=N%2BD3TRdqNhYZuPwyUr8Qm8zGreQh49kXfsLgprtKhL4%3D&reserved=0> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > > This message (including any attachments) may contain confidential > information. It is intended for use by the recipient only. Any > dissemination, copying or distribution to third parties without the express > consent of the sender is strictly prohibited. If you have received this > message in error, please delete it immediately and notify the sender. Thank > you for your collaboration. > _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
