Balazs Scheidler wrote:
On Mon, 2006-08-07 at 18:10 +0100, Hari Sekhon wrote:
Is there a way I can do a case insensitive match in syslog-ng?
Every place I've seen from grep to python to perl has their own way of doing the case insensitive flag.
So how do I set the case-insensitive match flag in syslog-ng?
Simple answer: you can't. Longer answer: you can't currently as noone has ever asked this before (or at least I can't remember).
Do you happen to have a suggestion how this should look like?
It could either stick to the syslog-ng style with a flag() set within match(), or perhaps a character at the end of the string eg. "someregex"i (like perl's /someregex/i ) or cleaner would be just to make imatch() to do insensitive matches... Not being able to do case insensitive searches is an extreme handicap if trying to fully leverage syslog-ng filters. imagine match("login failed") instead becomes match("[Ll][Oo][Gg][Ii][Nn] [Ff][Aa][Ii][Ll][Ee][Dd]") not quite as readable and sticky when you want to match anything longer.. Hari