<span style=" font-size:10pt;font-family:sans-serif">Hi!</span>
<br>
<br><span style=" font-size:10pt;font-family:sans-serif">Perhaps a rewrite
with SDATA?</span>
<br>
<br><span style=" font-size:10pt;font-family:sans-serif">e.g.</span>
<br><span style=" font-size:10pt;font-family:sans-serif">rewrite r_0110_f5_web
{</span>
<br><span style=" font-size:10pt;font-family:sans-serif"> set("f5_web"
value(".SDATA.custom@44084.1.syslogngrule"));</span>
<br><span style=" font-size:10pt;font-family:sans-serif">};</span>
<br><span style=" font-size:10pt;font-family:sans-serif">in your "receiving"
syslogpart</span>
<br><span style=" font-size:10pt;font-family:sans-serif">and a</span>
<br>
<br><span style=" font-size:10pt;font-family:sans-serif">filter f_0110_remote_sdata_rule
{</span>
<br><span style=" font-size:10pt;font-family:sans-serif"> match("f5_web"
value(".SDATA.custom@44084.1.syslogngrule"));</span>
<br><span style=" font-size:10pt;font-family:sans-serif">};</span>
<br>
<br><span style=" font-size:10pt;font-family:sans-serif">afterwards?</span>
<br>
<br><span style=" font-size:10pt;font-family:sans-serif">cheers</span>
<br><span style=" font-size:10pt;font-family:sans-serif">Matthias</span>
<br>
<br><span style=" font-size:10pt;font-family:sans-serif">------------------------------------------------------------------------------------<br>
METZLER <br>
Informationstechnologie<br>
<br>
Matthias Gruber <br>
IT-Infrastruktur & -Betrieb<br>
<br>
B. Metzler seel. Sohn & Co.<br>
Kommanditgesellschaft auf Aktien<br>
Untermainanlage 1<br>
60329 Frankfurt am Main<br>
Telefon (0 69) 21 04 - 43 30<br>
Telefax (0 69) 21 04 - 40 40<br>
MGruber@metzler.com<br>
</span><a href=www.metzler.com><span style=" font-size:10pt;font-family:sans-serif">www.metzler.com</span></a>
<br>
<br>
<br>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Von:
</span><span style=" font-size:9pt;font-family:sans-serif">"Faine,
Mark R. (MSFC-IS40)[NICS]" <mark.faine@nasa.gov></span>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">An:
</span><span style=" font-size:9pt;font-family:sans-serif">"wernli@in2p3.fr"
<wernli@in2p3.fr>, "Syslog-ng users' and developers' mailing
list" <syslog-ng@lists.balabit.hu></span>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Datum:
</span><span style=" font-size:9pt;font-family:sans-serif">17.01.2020
16:25</span>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Betreff:
</span><span style=" font-size:9pt;font-family:sans-serif">Re:
[syslog-ng] [EXTERNAL] Re: Rewrite set var value with tag?</span>
<br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Gesendet
von: </span><span style=" font-size:9pt;font-family:sans-serif">"syslog-ng"
<syslog-ng-bounces@lists.balabit.hu></span>
<br>
<hr noshade>
<br>
<br>
<br><tt><span style=" font-size:10pt">Forget tags, the goal is just to
have a value that is set in one log path but available in other log paths
that come after it.<br>
<br>
Thanks,<br>
-Mark<br>
<br>
______________________________________________________________________________<br>
Member info: </span></tt><a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng"><tt><span style=" font-size:10pt">https://lists.balabit.hu/mailman/listinfo/syslog-ng</span></tt></a><tt><span style=" font-size:10pt"><br>
Documentation: </span></tt><a href="http://www.balabit.com/support/documentation/?product=syslog-ng"><tt><span style=" font-size:10pt">http://www.balabit.com/support/documentation/?product=syslog-ng</span></tt></a><tt><span style=" font-size:10pt"><br>
FAQ: </span></tt><a href="http://www.balabit.com/wiki/syslog-ng-faq"><tt><span style=" font-size:10pt">http://www.balabit.com/wiki/syslog-ng-faq</span></tt></a><tt><span style=" font-size:10pt"><br>
<br>
</span></tt>
<br>
<br>
<br><font size="2" face="Arial"><font size="2" face="Arial"> </font></font><br>
<br>
<font size="2" face="Arial">Persönlich haftende Gesellschafter: Harald Illy, Michael Klaus, Friedrich von Metzler, Emmerich Müller, Gerhard Wiesheu<br>
Vorsitzender des Aufsichtsrats: Dr. Christoph Schücking<br>
Sitz der Gesellschaft: Frankfurt am Main, </font><font size="2" face="Arial">Handelsregister-Nr.</font><font size="2" face="Arial"> HRB 27 515</font><br>
<br>
<font size="2" face="Arial"><font size="2" face="Arial">Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfänger sein, so bitten wir Sie höflich, dies unverzüglich dem Absender mitzuteilen und die Nachricht zu löschen. Es ist unzulässig, die Nachricht unbefugt weiterzuleiten oder zu kopieren. Da wir nicht die Echtheit oder Vollständigkeit der in dieser Nachricht enthaltenen Informationen garantieren oder zusichern können, sind die vorstehenden Ausführungen rechtlich nicht bindend. Eine Haftung hierfür wird ausgeschlossen.</font></font><br>
<font size="2" face="Arial"><font size="2" face="Arial">This message is confidential. If you are not the intended recipient, we kindly ask you to inform the sender and delete the information. Any unauthorised dissemination or copying hereof is prohibited. As we cannot guarantee or assure the genuineness or completeness of the information contained in this message, the statements set forth above are not legally binding. Accordingly we cannot accept any liability for their contents.</font></font>