Hi all,
during some extensive test on syslog-ng, I found something that really make me difficult to implement some filters.
I need to match same EXACT messages, and so I used something like match("^MATCHTHIS$") in a filter statement...
but I find that the match will consider the message starting from the program name...
Is there any way to match JUST the message part without the program one ??? ( the program() just work on the program part of the message, so i expected that match() will work on the other one... )
Thanks in advance
Amodiovalerio Verde
amodiovalerio.verde@ags-it.com amover@libero.it
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
A regexp won't slow things down.