<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Balazs Scheidler wrote:
<blockquote cite="mid1155052689.22014.5.camel@bzorp.balabit" type="cite">
<pre wrap="">On Mon, 2006-08-07 at 18:10 +0100, Hari Sekhon wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Is there a way I can do a case insensitive match in syslog-ng?
Every place I've seen from grep to python to perl has their own way of
doing the case insensitive flag.
So how do I set the case-insensitive match flag in syslog-ng?
</pre>
</blockquote>
<pre wrap=""><!---->
Simple answer: you can't. Longer answer: you can't currently as noone
has ever asked this before (or at least I can't remember).
Do you happen to have a suggestion how this should look like?
</pre>
</blockquote>
It could either stick to the syslog-ng style with a flag() set within
match(), <br>
or perhaps a character at the end of the string eg. "someregex"i (like
perl's /someregex/i ) <br>
<br>
or cleaner would be just to make imatch() to do insensitive matches...<br>
<br>
<br>
Not being able to do case insensitive searches is an extreme handicap
if trying to fully leverage syslog-ng filters.<br>
<br>
imagine<br>
<br>
match("login failed")<br>
<br>
instead becomes<br>
<br>
match("[Ll][Oo][Gg][Ii][Nn] [Ff][Aa][Ii][Ll][Ee][Dd]")<br>
<br>
not quite as readable and sticky when you want to match anything
longer..<br>
<br>
<br>
Hari<br>
</body>
</html>