When attempting to use the match(“.asx”) in my filter it is returning anything with “asx”.  I only need to return those lines with the period before the asx, hence a file extension.  For some reason syslog-ng seems to ignore my specification of the . before the asx.  I have tried searching with ..asx and \.asx and /.asx but doesn’t seem to work no matter what I do.  Any suggestions?

Dan Edwards

Network Specialist

A. Duda & Sons, Inc.