16 Dec
2003
16 Dec
'03
9:52 a.m.
Allan Wind wrote:
Hello friends,
I am trying to match the following entry with syslog-ng 1.6.0rc4:
Dec 11 15:25:10 log_source@pawan amavis[29961]: (29961-01-2) Passed, <syslog-ng-admin@lists.balabit.hu> -> <allanwind@lifeintegrity.com>, Message-ID: <20031211202502.22100.73262.Mailman@www.balabit.hu>, Hits: -1.364
And expected this to do the trick (after a bit of trial and error and checking the archives):
match("^\\(.*Passed, ")
and eventually
match("^\\(\d+-\d+\\) Passed")
What is it that you are trying to match? Is it "(ddddd-dd-d) Passed"? i.e. parenthesis, 5 digits, hyphen, 2 digits, hypen, 1 digit, parenthesis, space and the word Passed? Jim