<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Oops, forgot the version… I'm running 3.3.3.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">For now, I'm locked into using version 3.3.3.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">In my implementation, I'm defining
<i>destinations</i> once (local log file, remote syslog server, Email address, …) and use them for multiple
<i>services</i>. Each <i>service</i> can have a different message format for each
<i>destination</i>, and I want to avoid defining a new <i>destination</i> for each
<i>service/destination</i> combination.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Upon further investigation, I think I can use the
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D">'if'</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> template function to pick which of my custom functions to use and avoid the rewrites.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The template functions that I can release are:<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:.5in"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Using
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D">'ipv4-to-int'</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> as a template and added these to
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D">'modules/convertfuncs/convert-funcs.c'</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">:<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">/*<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* HP - add a 'to-lower-case' function<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* change case to lower for a string<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">*/<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">static void<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">tf_to_lower_case(LogMessage *msg, gint argc, GString *argv[], GString *result)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">{<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> gint i;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> for (i = 0; i < argc; i++)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> {<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> char *p;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> p = argv[i]->str;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> while (*p)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, tolower(*p++));<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> if (i < argc -1)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, ' ');<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> }<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">}<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">/*<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* HP - add a 'to-upper-case' function<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* change case to upper for a string<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">*/<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">static void<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">tf_to_upper_case(LogMessage *msg, gint argc, GString *argv[], GString *result)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">{<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> gint i;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> for (i = 0; i < argc; i++)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> {<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> char *p;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> p = argv[i]->str;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> while (*p)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, toupper(*p++));<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> if (i < argc -1)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, ' ');<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> }<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">}<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">/*<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* HP - add a 'tab-to-comma' function<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* change tabs to commas ',' in a string<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">*/<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">static void<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">tf_tab_to_comma(LogMessage *msg, gint argc, GString *argv[], GString *result)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">{<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> gint i;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> for (i = 0; i < argc; i++)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> {<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> char *p;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> p = argv[i]->str;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> while (*p)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, (*p++ == '\t')?',':*(p-1));<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> if (i < argc -1)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, ' ');<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> }<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">}<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">/*<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* HP - add a 'tab_to_semicolon' function<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* change tabs to semicolons ';' in a string<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">*/<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">static void<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">tf_tab_to_semicolon(LogMessage *msg, gint argc, GString *argv[], GString *result)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">{<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> gint i;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> for (i = 0; i < argc; i++)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> {<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> char *p;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> p = argv[i]->str;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> while (*p)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, (*p++ == '\t')?';':*(p-1));<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> if (i < argc -1)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, ' ');<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> }<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">}<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">/*<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* HP - add a 'tab-to-Bar' function<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">* change tabs to bars '|' in a string<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">*/<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">static void<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">tf_tab_to_bar(LogMessage *msg, gint argc, GString *argv[], GString *result)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">{<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> gint i;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> for (i = 0; i < argc; i++)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> {<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> char *p;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> p = argv[i]->str;<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> while (*p)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, (*p++ == '\t')?'|':*(p-1));<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> if (i < argc -1)<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> g_string_append_c(result, ' ');<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> }<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">}<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">TEMPLATE_FUNCTION_SIMPLE(tf_ipv4_to_int);<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">TEMPLATE_FUNCTION_SIMPLE(tf_to_lower_case);<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">TEMPLATE_FUNCTION_SIMPLE(tf_to_upper_case);<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">TEMPLATE_FUNCTION_SIMPLE(tf_tab_to_comma);<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">TEMPLATE_FUNCTION_SIMPLE(tf_tab_to_semicolon);<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">TEMPLATE_FUNCTION_SIMPLE(tf_tab_to_bar);<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">static Plugin convert_func_plugins[] =<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">{<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> TEMPLATE_FUNCTION_PLUGIN(tf_ipv4_to_int, "ipv4-to-int"),<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> TEMPLATE_FUNCTION_PLUGIN(tf_to_lower_case, "to-lower-case"),<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> TEMPLATE_FUNCTION_PLUGIN(tf_to_upper_case, "to-upper-case"),<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> TEMPLATE_FUNCTION_PLUGIN(tf_tab_to_comma, "tab-to-comma"),<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> TEMPLATE_FUNCTION_PLUGIN(tf_tab_to_semicolon, "tab-to-semicolon"),<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D"> TEMPLATE_FUNCTION_PLUGIN(tf_tab_to_bar, "tab-to-bar"),<o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left:1.0in"><span style="font-size:9.0pt;font-family:"Courier New";color:#1F497D">};<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Chris<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Balazs Scheidler [mailto:bazsi77@gmail.com]
<br>
<b>Sent:</b> Friday, January 25, 2013 10:48 PM<br>
<b>To:</b> Syslog-ng users' and developers' mailing list; Johnson, Chris (HP TippingPoint Roseville)<br>
<b>Subject:</b> Re: [syslog-ng] Problems with rewrite set and template functions...<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p style="margin-bottom:12.0pt">Hi, <br>
<br>
I recall something related, but I need to check. In that case the clone method wasn't properly initializing all the fields of an object in case it is referenced multiple times.
<br>
<br>
Which version are you using? <br>
<br>
I see you have implemented a number of interesting template functions, I'd like to integrate them to syslog-ng if you are permitted to contribute them.
<br>
<br>
Also, you might be able to get rid of rewrite rules and simply use the template option for file destinations, that'd get your config much simpler.
<br>
<br>
And another note, 3.4 offers junctions and channels that again can make it possible to enclose your rewrites into reusable blocks, and by the use of inline objects, would also simplify the configuration a lot.
<br>
<br>
Cheers, <br>
<br>
----- Original message ----- <br>
> Hi all, <br>
> I've come across a problem when using the rewrite set function with a <br>
> template function. I've created a custom template function <br>
> 'audit-TPTI-to-Email' and use it in a rewrite: rewrite r_audit_EMail { <br>
> set("$(audit-TPTI-to-EMail ${MSG})", value("MSG")); <br>
> }; <br>
> <br>
> Then call it: <br>
> filter f_audit_pgm{program("AUDIT-*" type("glob"));}; <br>
> log { <br>
> source(s_local); <br>
> filter(f_audit_pgm); <br>
> log { <br>
> destination(d_logID_02); <br>
> }; <br>
> log { <br>
> rewrite(r_audit_EMail); <br>
> rewrite(r_quote_newlines); <br>
> destination(d_logID_13); <br>
> }; <br>
> flags(final); <br>
> }; <br>
> Everything work fine. <br>
> Then if I add another call to rewrite (i.e. add a second email <br>
> destination): filter f_audit_pgm{program("AUDIT-*" type("glob"));}; <br>
> log { <br>
> source(s_local); <br>
> filter(f_audit_pgm); <br>
> log { <br>
> destination(d_logID_02); <br>
> }; <br>
> log { <br>
> rewrite(r_audit_EMail); <br>
> rewrite(r_quote_newlines); <br>
> destination(d_logID_13); <br>
> }; <br>
> log { <br>
> rewrite(r_audit_EMail); <br>
> rewrite(r_quote_newlines); <br>
> destination(d_logID_14); <br>
> }; <br>
> flags(final); <br>
> }; <br>
> Syslog-ng crashes with a segfault. <br>
> I've narrowed in down to any template function (just to make sure *I* <br>
> wasn't screwing something up in my custom function): rewrite r_echo { <br>
> set("$(echo $PROGRAM)" value("PROGRAM")); }; destination d_test1{ <br>
> file("/var/log/test1.log"); }; destination d_test2{ <br>
> file("/var/log/test2.log"); }; <br>
> <br>
> log { <br>
> source(s_local); <br>
> log { <br>
> rewrite(r_echo); <br>
> destination(d_test1); <br>
> }; <br>
> log { <br>
> rewrite(r_echo); <br>
> destination(d_test2); <br>
> }; <br>
> }; <br>
> <br>
> The backtrace: <br>
> Backtrace: <br>
> /usr/local/lib/libsyslog-ng-3.3.3.so(plugin_find+0x39)[0x7f3eb76ff019] <br>
> /usr/local/lib/libsyslog-ng-3.3.3.so(log_template_compile+0x84f)[0x7f3eb7703baf]
<br>
> /usr/local/lib/libsyslog-ng-3.3.3.so(log_rewrite_set_new+0x99)[0x7f3eb76f3349] <br>
> /usr/local/lib/libsyslog-ng-3.3.3.so[0x7f3eb76f3371] <br>
> /usr/local/lib/libsyslog-ng-3.3.3.so(log_center_init_pipe_line+0x35d)[0x7f3eb76dfecd]
<br>
> /usr/local/lib/libsyslog-ng-3.3.3.so(log_center_init_pipe_line+0xd2)[0x7f3eb76dfc42]
<br>
> /usr/local/lib/libsyslog-ng-3.3.3.so(log_center_init+0x56)[0x7f3eb76e0226] <br>
> /usr/local/lib/libsyslog-ng-3.3.3.so(cfg_init+0xb0)[0x7f3eb76e1530] <br>
> /usr/local/lib/libsyslog-ng-3.3.3.so(main_loop_init+0x11b)[0x7f3eb76f9abb] <br>
> /usr/local/sbin/syslog-ng(main+0x11f)[0x40168f] <br>
> /lib/libc.so.6(__libc_start_main+0xe6)[0x7f3eb6240126] <br>
> /usr/local/sbin/syslog-ng[0x401379] <br>
> <br>
> I threw in some debug statements: <br>
> LogRewrite * <br>
> log_rewrite_set_new(const gchar *new_value) <br>
> { <br>
> fprintf(stderr, "%s('%s'):\n", __FUNCTION__, new_value); <br>
> <br>
> Plugin * <br>
> plugin_find(GlobalConfig *cfg, gint plugin_type, const gchar <br>
> *plugin_name) { <br>
> fprintf(stderr, "%s(%p, %d, '%s'): '\n", __FUNCTION__, cfg, <br>
> plugin_type, plugin_name); <br>
> <br>
> Which showed that the 'cfg' pointer is null when rewrite is called the <br>
> second time: log_rewrite_set_new('$(echo $PROGRAM)'): <br>
> plugin_find(0x60e210, 13, 'echo'): ' <br>
> plugin_find: plugin->name = 'sys-to-EMail' <br>
> plugin_find: plugin->name = 'audit-TPTI-to-EMail' <br>
> plugin_find: plugin->name = 'quar-TPTI-to-EMail' <br>
> plugin_find: plugin->name = 'quar-TPTI-to-CEF' <br>
> plugin_find: plugin->name = 'tab-to-bar' <br>
> plugin_find: plugin->name = 'tab-to-semicolon' <br>
> plugin_find: plugin->name = 'tab-to-comma' <br>
> plugin_find: plugin->name = 'to-upper-case' <br>
> plugin_find: plugin->name = 'to-lower-case' <br>
> plugin_find: plugin->name = 'ipv4-to-int' <br>
> plugin_find: plugin->name = 'log-session-seqnum' <br>
> plugin_find: plugin->name = 'indent-multi-line' <br>
> plugin_find: plugin->name = 'if' <br>
> plugin_find: plugin->name = 'grep' <br>
> plugin_find: plugin->name = 'echo' <br>
> plugin_find(0x60e210, 2, 'file'): ' <br>
> [...] <br>
> log_rewrite_set_new('$(echo $PROGRAM)'): <br>
> plugin_find((nil), 13, 'echo'): ' <br>
> *** Segmentation fault <br>
> <br>
> Sooo, my questions are: <br>
> Is this expected behavior? <br>
> Has this been patched already? <br>
> Is there another way I can call a custom function to reformat the <br>
> message field on a destination-by-destination basis? <br>
> <br>
> Thanks, <br>
> Chris <br>
> <br>
> ---------------------------------------- <br>
> Christopher Johnson <br>
> <a href="mailto:chris.johnson3@hp.com">chris.johnson3@hp.com</a><<a href="mailto:chris.johnson3@hp.com">mailto:chris.johnson3@hp.com</a>>
<br>
> HP Software - Security Product Group <br>
> (916) 785-2817 <br>
> ---------------------------------------- <br>
> <o:p></o:p></p>
</div>
</body>
</html>