<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"><DIV>Hi</DIV>
<DIV>Thanks for replying and file.</DIV>
<DIV>I work on network management project(Correlation of logs), my big problem is log classification and extract log field(normalization of logs). Do you have any idea for it? <BR><BR>--- On <B>Thu, 12/8/10, Robert Fekete <I><frobert@balabit.com></I></B> wrote:<BR></DIV>
<BLOCKQUOTE style="BORDER-LEFT: rgb(16,16,255) 2px solid; PADDING-LEFT: 5px; MARGIN-LEFT: 5px"><BR>From: Robert Fekete <frobert@balabit.com><BR>Subject: Re: [syslog-ng] Pattern extraction<BR>To: "Syslog-ng users' and developers' mailing list" <syslog-ng@lists.balabit.hu><BR>Date: Thursday, 12 August, 2010, 4:19 PM<BR><BR>
<DIV class=plainMail>majid as wrote:<BR><BR>> Hi<BR>> I have problem with pattern extraction from syslog messages. can anyone help me how extract patterns?<BR><BR><BR>Hi,<BR>I assume you are trying to use the pattern database (db_parser()). My collegue, <BR>Peter Holtzl has written a tutorial about it that you might find useful: <BR><A href="http://www.balabit.com/dl/white_papers/syslog-ng-v3.1-whitepaper-message-classification-en.pdf" target=_blank>http://www.balabit.com/dl/white_papers/syslog-ng-v3.1-whitepaper-message-classification-en.pdf</A><BR><BR>Otherwise, please let us know exactly what you are trying to do, how, and what <BR>the problem is so we can help you.<BR><BR>Regards,<BR><BR>Robert<BR><BR>> <BR>> <BR>> <BR>> <BR>> <BR>> ------------------------------------------------------------------------<BR>> <BR>> ______________________________________________________________________________<BR>> Member info:
<A href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target=_blank>https://lists.balabit.hu/mailman/listinfo/syslog-ng</A><BR>> Documentation: <A href="http://www.balabit.com/support/documentation/?product=syslog-ng" target=_blank>http://www.balabit.com/support/documentation/?product=syslog-ng</A><BR>> FAQ: <A href="http://www.campin.net/syslog-ng/faq.html" target=_blank>http://www.campin.net/syslog-ng/faq.html</A><BR>> <BR><BR>______________________________________________________________________________<BR>Member info: <A href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target=_blank>https://lists.balabit.hu/mailman/listinfo/syslog-ng</A><BR>Documentation: <A href="http://www.balabit.com/support/documentation/?product=syslog-ng" target=_blank>http://www.balabit.com/support/documentation/?product=syslog-ng</A><BR>FAQ: <A href="http://www.campin.net/syslog-ng/faq.html"
target=_blank>http://www.campin.net/syslog-ng/faq.html</A><BR><BR></DIV></BLOCKQUOTE></td></tr></table><br>