On 12/18/2013 10:50 AM, Paul Fontenot wrote:
> Thanks, I changed it to this Exec if $SourceName =~ /^(yum|su|sudo)$/ $dst =
> $1;
>
> It wouldn't recognize the su but did recognize sudo - meaning su didn't end
> up in a dedicated log it ended up in the messages.log (catch all)
Yeah, I missed a ?
Hi,
On Wed, 18 Dec 2013 08:51:43 -0700
"Paul Fontenot" wrote:
> 33 Execif $SourceName == yum { \
The string constant should be quoted:
Execif $SourceName == 'yum' { \
Regards,
Botond
--
Rapidly trouble
mailto:mna...@willingminds.com]
Sent: Wednesday, December 18, 2013 9:24 AM
To: NXLog Users
Subject: Re: [nxlog-ce-users] if else and $SourceName
Untested, but I think you can simplify this considerably as follows:
Exec if $SourceName =~ /^(yum|su(do))$/ $dst = $1;
Regards,
Mark
Sent from my iPad
> On Dec 1
Untested, but I think you can simplify this considerably as follows:
Exec if $SourceName =~ /^(yum|su(do))$/ $dst = $1;
Regards,
Mark
Sent from my iPad
> On Dec 18, 2013, at 7:51 AM, "Paul Fontenot" wrote:
>
> I think I've been looking at this for too long and now can't see the forest
> for t
I think I've been looking at this for too long and now can't see the forest
for the trees, I'm receiving the following error
2013-12-18 08:47:43 ERROR Couldn't parse Exec block at
/etc/nxlog.d/01-local.conf:42;couldn't parse statement at line 42, character
31 in /etc/nxlog.d/01-local.conf;syntax e
