Re: [syslog-ng]Quoting ( and ) in a match

On 2003-12-17T09:45:15+0000, Jim Mozley wrote:

Afraid I don't understand why you are trying to match in the way you are, for instance within the parentheses why not match [-0-9]+ or [-\d]+ if \d is supported?

I want to ensure that my regex matches the following prefix: "amavis[29961]: (29961-01-2) Passed, " as the tail of the event (as originally posted) may contain tainted data. It could work out to something like this, or as you suggested. program("^amavis") and ( match("^[^:]+: [\\(\\)\\d-]+ Passed, ") or ... ) Does program() contain the [pid] part? I.e. "amavis[29961]" in this example or just "amavis"? /Allan -- Allan Wind P.O. Box 2022 Woburn, MA 01888-0022 USA