On Tuesday, January 10, 2012 18:54 CET, Martin Holste <mcholste@gmail.com> wrote:
AFAIK, running a CSV parser on a field extracted by patterndb should be possible even now, you just have to specify a template for the csv parser so that it runs on the specified field, and not on MSG. (Although in 3.3.3 this seems to be broken, but this will be hopefully corrected.)
Ok, but what about Patterndb on macros? That's not possible yet, but Bazsi mentioned that he wants to do it (or something like that) for 3.4.
Robert
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq