<p dir="ltr">I think the restriction should be removed. Viktor, do you agree?</p>
<div class="gmail_quote">On Oct 20, 2014 12:47 AM, "Evan Rempel" <<a href="mailto:erempel@uvic.ca">erempel@uvic.ca</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Technically speaking, any non-alphanumeric character will terminate the<br>
TAG field at the beginning<br>
of the message. This is usually one of : [ or space as in the examples<br>
<br>
program: this is the message<br>
program[123]: this is the message<br>
program this is the message<br>
<br>
<br>
In practice though, syslog daemons will send TAGs that contain any<br>
character and the syslog-ng Agent for Windows<br>
will forward the application name as it shows in the Windows Event Log.<br>
In some cases, this TAG will contain a $ character.<br>
<br>
The patterndb-4.xsd definition disallows the $ character in the program<br>
pattern in pattern database files.<br>
<br>
Can this restriction be removed to allow for the $ or is this a larger<br>
issue that I see?<br>
<br>
Thanks again for all of the support.<br>
<br>
Evan.<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div>