<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>RE: issue with rewrite. Please help.</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#1F497D" FACE="Calibri">Can somebody help here on this</FONT><FONT COLOR="#1F497D" FACE="Calibri"> issue</FONT><FONT COLOR="#1F497D" FACE="Calibri">?</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma">_____________________________________________<BR>
</FONT></SPAN><SPAN LANG="en-us"><B></B></SPAN><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Tahoma">From:</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma"> Balla, Hithendra (EXT-Other - IN/Bangalore)<BR>
</FONT></SPAN><SPAN LANG="en-us"><B></B></SPAN><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Tahoma">Sent:</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma"> Friday, June 15, 2012 9:09 AM<BR>
</FONT></SPAN><SPAN LANG="en-us"><B></B></SPAN><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Tahoma">To:</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma"> 'Syslog-ng users' and developers' mailing list'<BR>
</FONT></SPAN><SPAN LANG="en-us"><B></B></SPAN><SPAN LANG="en-us"><B><FONT SIZE=2 FACE="Tahoma">Subject:</FONT></B></SPAN><SPAN LANG="en-us"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Tahoma"> issue with rewrite. Please help.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Hi all,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">We have the following lo</FONT><FONT FACE="Calibri">g</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">2012-06-15T09:00:26+05:30 kddi-cm-1-sb 4/6</FONT></SPAN><SPAN LANG="en-us"><B> <FONT COLOR="#FF0000" FACE="Calibri">[ID 800047 auth.info]</FONT></B></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> Accepted publickey for xyz</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">We wanted to replace</FONT></SPAN><SPAN LANG="en-us"><B> <FONT COLOR="#FF0000" FACE="Calibri">[ID 800047 auth.info]</FONT><FONT COLOR="#FF0000" FACE="Calibri"></FONT></B></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">with</FONT></SPAN><SPAN LANG="en-us"><B><FONT COLOR="#FF0000" FACE="Calibri"> empty string</FONT></B></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">(i.e. “”)</FONT><FONT FACE="Calibri"> and print the following </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">2012-06-15T09:00:26+05:30 kddi-cm-1-sb 4/6 Accepted publickey f</FONT><FONT FACE="Calibri">or xyz</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">So we have used the below re-write with subst. But this is not working in</FONT></SPAN><SPAN LANG="en-us"><B> <FONT FACE="Calibri">syslog-ng 3.4.0alpha2</FONT></B></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">. </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#632423" FACE="Calibri">rewrite rw_msg{</FONT></SPAN><SPAN LANG="en-us"><B><FONT COLOR="#632423" FACE="Calibri">subst</FONT></B></SPAN><SPAN LANG="en-us"><FONT COLOR="#632423" FACE="Calibri">("</FONT></SPAN><SPAN LANG="en-us"></SPAN><A HREF="file://\\[.*\\]"><SPAN LANG="en-us"><U><FONT COLOR="#0000FF">\\</FONT><FONT COLOR="#0000FF" FACE="Calibri">[.*\\]</FONT></U></SPAN><SPAN LANG="en-us"></SPAN></A><SPAN LANG="en-us"><FONT COLOR="#632423" FACE="Calibri">", "", value("MESSAGE"));};</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Can somebody help out here?</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Thanks</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Hithendra</FONT></SPAN></P>
</BODY>
</HTML>