[syslog-ng] Using source tags in rewrites?

[syslogng at feystorm.net]

To what end?
Rewrites are used to change or set key/value pairs. Flags arent 
key/value pairs, theyre flags, meaning you either have the flag, or you 
dont. Think of it this way; each incoming log statment has a list of 
flag names associated with it, you can see if a certain flag name is in 
that list, but thats it.
It would help to know what youre trying to accomplish though.

-Patrick

Sent: Monday, August 09, 2010 10:29:10 PM
From: Steve Barnes <steve at echo.id.au>
To: syslog-ng at lists.balabit.hu
Subject: [syslog-ng] Using source tags in rewrites?
> Hi
>
> Is it possible to use source tags in rewrite rules? The documentation
> indicates only macros are acceptable?
>
> Using Syslog 3.1.2.
>
> Cheers
>
> Steve
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100810/487e4f33/attachment.htm