<div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">Message: 1<br>
Date: Mon, 26 Sep 2011 18:07:00 +0800<br>
From: Luis Pugoy <<a href="mailto:lpugoy@insynchq.com">lpugoy@insynchq.com</a>><br>
Subject: Re: [syslog-ng] How to send tracebacks through syslog-ng?<br>
(Jakub Jankowski)<br>
To: <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br>
Message-ID:<br>
<CA+WGxEhGFX7V9C+71BgcU1TZsb21+FbzX5GdCZ=<a href="mailto:ZLPEDJ4fYFg@mail.gmail.com">ZLPEDJ4fYFg@mail.gmail.com</a>><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
On Sun, Sep 25, 2011 at 1:57 AM, Luis Pugoy <<a href="mailto:lpugoy@insynchq.com">lpugoy@insynchq.com</a>> wrote:<br>
<br>
> Message: 4<br>
>> Date: Sat, 24 Sep 2011 09:31:34 +0200 (CEST)<br>
>> From: Jakub Jankowski <<a href="mailto:shasta@toxcorp.com">shasta@toxcorp.com</a>><br>
>> Subject: Re: [syslog-ng] How to send tracebacks through syslog-ng?<br>
>> To: Syslog-ng users' and developers' mailing list<br>
>> <<a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a>><br>
>> Message-ID: <<a href="mailto:alpine.LNX.2.00.1109240928240.15891@bluzg.slackware.pl">alpine.LNX.2.00.1109240928240.15891@bluzg.slackware.pl</a>><br>
>> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed<br>
>><br>
>> On 2011-09-24, Luis Pugoy wrote:<br>
>><br>
>> > rewrite r_rewrite_subst { subst("a*", "?", value("MESSAGE")<br>
>> type("pcre")<br>
>> > flags("utf8" "global")); };<br>
>> ><br>
>> > I thought that it would replace 0 or more occurrences of 'a' with a<br>
>> question<br>
>> > mark. However, when the input is 'a', the output becomes 'a?'. It just<br>
>> > appends a question mark at the end. 'aa' also becomes 'aa?'. What is<br>
>> weirder<br>
>> > still is that even if the input does not contain 'a', the question mark<br>
>> is<br>
>> > still appended. So '1' becomes '1?'.<br>
>><br>
>> Well, does "1" match /a*/ ? :)<br>
>> It doesn't make any difference if that's /a*/, /b*/ or /.*/ - this kind of<br>
>> regexp matches everything, even an empty string.<br>
>><br>
>> HTH<br>
>><br>
>> --<br>
>> Jakub Jankowski|<a href="mailto:shasta@toxcorp.com">shasta@toxcorp.com</a>|<a href="http://toxcorp.com/" target="_blank">http://toxcorp.com/</a><br>
>> GPG: FCBF F03D 9ADB B768 8B92 BB52 0341 9037 A875 942D<br>
><br>
><br>
> Hello Jakub.<br>
><br>
> Thanks for the reply. You're right in that "1" matches /a*/, but wouldn't<br>
> the resulting replacement be "?" instead of "1?" ? Also, if I just use /a/<br>
> and use "a" as input, it does not seem to match. The text is still outputted<br>
> as "a".<br>
><br>
<br>
I don't know the policy regarding bumping threads here, but I'd like to bump<br>
this. Can anyone confirm the results I'm getting? Is there also something<br>
wrong with my understanding of pcre? I'm sorry if this is not allowed.<br></blockquote><div><br></div><div>I was able to solve my initial problem. The "\p{Zl}" must be changed to "\\p}{Zl}".</div>
</div>