On Mon, 2007-12-03 at 15:17 -0500, Micah Anderson wrote:
* Balazs Scheidler <bazsi@balabit.hu> [071203 02:50]:
I understand that the need is genuine and the feature this patch provides is useful, but exactly as Evan wrote in his email, its implementation is way out of the syslog-ng model. It uses filters to rewrite parts of the message.
I agree that there may be better ways to do this, however it is my understanding that the 'general message rewrite facility' is not currently anything other than a proposal. When is this expected to be available so we can do this the 'right' way? If it is far off, could this patch be accepted until that is available and it can be replaced with the better way?
True, but removing a feature later/making an incompatible change in the configuration file is always a pain, and I'll be the one to explain it to other users who did not follow this discussion. I'm doing the design of the next major syslog-ng release right now, and I'll make sure this feature sticks somewhere. -- Bazsi