<p dir="ltr">I would also like to thank Fabien for his help. Such assistance on the mailing list is really useful for the project as a whole.</p>
<p dir="ltr">And although its important I can&#39;t always make it in a timely manner.</p>
<p dir="ltr">Kudos, Fabien.</p>
<div class="gmail_quote">On Dec 18, 2013 4:53 PM, &quot;Nick&quot; &lt;<a href="mailto:linickx@gmail.com">linickx@gmail.com</a>&gt; wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
 Hello Fabien,<br>
<br>
Thank you for the example, I can now see what you have done and<br>
changes respond as I expect.<br>
<br>
Now on to start my own :)<br>
<br>
Thanks Again!<br>
rgds,<br>
Nick<br>
<br>
On 17 December 2013 12:19, Fabien Wernli &lt;<a href="mailto:wernli@in2p3.fr">wernli@in2p3.fr</a>&gt; wrote:<br>
&gt; Hi,<br>
&gt;<br>
&gt; On Tue, Dec 17, 2013 at 12:07:41PM +0000, Nick wrote:<br>
&gt;&gt; [1] I have added a program attribute.<br>
&gt;<br>
&gt; Note that the &quot;program&quot; attribute of &quot;test_message&quot; needs to match the<br>
&gt; rule&#39;s &quot;pattern&quot; text if you want a match.<br>
&gt;<br>
&gt;&gt; [3] I agree that the pattern is wrong, the output above shows that but<br>
&gt;<br>
&gt; Try the following: <a href="https://gist.github.com/faxm0dem/b2c87efb098b4aba1969" target="_blank">https://gist.github.com/faxm0dem/b2c87efb098b4aba1969</a><br>
&gt;<br>
&gt;&gt; [4] I assume you mean &quot;pdbtool patternize -f testfile.log&quot; ? I&#39;m not<br>
&gt;&gt; sure how that helps...<br>
&gt;<br>
&gt; Actually I meant &#39;pdbtool match&#39;<br>
&gt;<br>
&gt; Sadly, &#39;patternize&#39; failed to help me in the past, maybe someone else can<br>
&gt; comment on that.<br>
&gt;<br>
&gt; ______________________________________________________________________________<br>
&gt; Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
&gt; Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
&gt; FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
&gt;<br>
<br>
<br>
<br>
--<br>
Shameless plug for google Juice: <a href="http://www.linickx.com" target="_blank">http://www.linickx.com</a><br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>