<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#0050d0">
<font size="-1"><font face="Helvetica, Arial, sans-serif">To what end?<br>
Rewrites are used to change or set key/value pairs. Flags arent
key/value pairs, theyre flags, meaning you either have the flag, or you
dont. Think of it this way; each incoming log statment has a list of
flag names associated with it, you can see if a certain flag name is in
that list, but thats it.<br>
It would help to know what youre trying to accomplish though.<br>
<br>
-Patrick<br>
</font></font><br>
Sent: Monday, August 09, 2010 10:29:10 PM<br>
From: Steve Barnes <a class="moz-txt-link-rfc2396E" href="mailto:steve@echo.id.au"><steve@echo.id.au></a><br>
To: <a class="moz-txt-link-abbreviated" href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a> <br>
Subject: [syslog-ng] Using source tags in rewrites?
<blockquote
cite="mid:1f4f0a960151c8be1ea347f6ce418d2d.squirrel@127.0.0.1"
type="cite">
<pre wrap="">Hi
Is it possible to use source tags in rewrite rules? The documentation
indicates only macros are acceptable?
Using Syslog 3.1.2.
Cheers
Steve
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
</body>
</html>