<div dir="ltr"><div><div><div><div><div><div><div><div>Hi Vincent,<br><br></div>I am working on your date-parser() stuff that was integrated to syslog-ng-incubator recently. It is great stuff, so I'd like to make it part of the main syslog-ng codebase.<br><br></div>I am doing some cleanups, which you can follow at the f/date-parser branch in <a href="http://github.com/balabit/syslog-ng">github.com/balabit/syslog-ng</a><br><br></div>I'd have a question though: I can see the date-offset() option for date parser, which seems to skip the specified number of characters in the input.<br><br></div>Can you please describe the usecase behind that? I'd be reluctant to add such an option to a parser (as none of the other have such an option), and it should be possible to do the same using template functions, e.g. something like this:<br><br></div>date-parser(template("$(substr $MSG 5)"));<br><br></div>This would similarly skip the first 5 characters.<br><br></div>If this addresses your original use-case, I'd drop the date-offset() option.<br><br></div>Thanks in advance,<br clear="all"><div><div><div><div><div><div><div><div><div><div><div class="gmail_signature"><div dir="ltr">-- <br>Bazsi<br></div></div></div>
</div></div></div></div></div></div></div></div></div></div>