[syslog-ng] patterndb will not accept a program containing a $

Balazs Scheidler bazsi77 at gmail.com
Sat Oct 25 22:37:29 CEST 2014


I think the restriction should be removed. Viktor, do you agree?
On Oct 20, 2014 12:47 AM, "Evan Rempel" <erempel at uvic.ca> wrote:

> Technically speaking, any non-alphanumeric character will terminate the
> TAG field at the beginning
> of the message. This is usually one of : [ or space as in the examples
>
> program: this is the message
> program[123]: this is the message
> program this is the message
>
>
> In practice though, syslog daemons will send TAGs that contain any
> character and the syslog-ng Agent for Windows
> will forward the application name as it shows in the Windows Event Log.
> In some cases, this TAG will contain a $ character.
>
> The patterndb-4.xsd definition disallows the $ character in the program
> pattern in pattern database files.
>
> Can this restriction be removed to allow for the $ or is this a larger
> issue that I see?
>
> Thanks again for all of the support.
>
> Evan.
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20141025/795390fb/attachment.htm 


More information about the syslog-ng mailing list