<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>issue with rewrite. Please help.</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Hi all,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">We have the following</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> log</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">2012-06-15T09:00:26+05:30 kddi-cm-1-sb 4/6</FONT></SPAN><SPAN LANG="en-us"><B> <FONT COLOR="#FF0000" FACE="Calibri">[ID 800047 auth.info]</FONT></B></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> Accepted publickey for xyz</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">W</FONT><FONT FACE="Calibri">e</FONT> <FONT FACE="Calibri">wanted to re</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">place</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"></FONT></SPAN><SPAN LANG="en-us"><B> <FONT COLOR="#FF0000" FACE="Calibri">[ID 800047 auth.info]</FONT></B></SPAN><SPAN LANG="en-us"><B><FONT COLOR="#FF0000" FACE="Calibri"></FONT></B></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">with</FONT></SPAN><SPAN LANG="en-us"><B><FONT COLOR="#FF0000" FACE="Calibri"></FONT></B></SPAN><SPAN LANG="en-us"><B> <FONT COLOR="#FF0000" FACE="Calibri">empty string</FONT></B></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">(i.e.</FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">“</FONT><FONT FACE="Calibri">”</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">)</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"></FONT></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">and print the following</FONT></SPAN><SPAN LANG="en-us"> </SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">2012-06-15T09:00:26+05:30 kddi-cm-1-sb 4/6 Accepted publickey for xyz</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">S</FONT><FONT FACE="Calibri">o</FONT> <FONT FACE="Calibri">we have used the below re-write with subst. But this is not working</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> i</FONT><FONT FACE="Calibri">n</FONT></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"></FONT></SPAN><SPAN LANG="en-us"><B> <FONT FACE="Calibri">syslog-ng 3.4.</FONT><FONT FACE="Calibri">0alpha2</FONT></B></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">. </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT COLOR="#632423" FACE="Calibri">rewrite rw_msg{</FONT></SPAN><SPAN LANG="en-us"><B><FONT COLOR="#632423" FACE="Calibri">subst</FONT></B></SPAN><SPAN LANG="en-us"><FONT COLOR="#632423" FACE="Calibri">("\\[.*\\]", "", value("MESSAGE"));};</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Can somebody help out here?</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">T</FONT><FONT FACE="Calibri">hanks</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Hithendra</FONT></SPAN><SPAN LANG="en-us"></SPAN></P>
</BODY>
</HTML>