<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7638.1">
<TITLE>Which macros are available for filtering ?</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<BR>
<P><FONT SIZE=2>On a test machine, I've set up syslog-ng with a filter which looks like this :<BR>
<BR>
filter filter1 { match(".+" VALUE ("MACRO")); };<BR>
<BR>
I've tried many MACROS and it seems only a few of them are not empty (easy to spot using this regex). The most surprising is that several documented macros are empty : for instance, MSGHDR and MSG (MSG should be the same than MESSAGE, but looks like it's not).<BR>
<BR>
Is it a bug ?<BR>
<BR>
Thanks,</FONT>
</P>
</BODY>
</HTML>