It might be helpful to review bug 211 - dbparser pattern order breaks validation https://bugzilla.balabit.com/show_bug.cgi?id=211 On 03/03/2014 12:52 PM, Fabien Wernli wrote:
Hi,
On Wed, Nov 27, 2013 at 11:19:26AM +0100, Balazs Scheidler wrote:
So it should just work (tm). If it doesn't then probably the merge algorithm is at fault.
Could you pls create a simpler, artificial example that demonstrates the issue so that I can reproduce it locally?
After some lag, here's the minimal configuration I prepared:
https://gist.github.com/faxm0dem/1e6dbe303e033a43acb5
The test message matches or doesn't depending on the order of patterns in the second ruleset.
Either this ain't right, or I'm misunderstanding something
Cheers
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Evan Rempel erempel@uvic.ca Senior Systems Administrator 250.721.7691 Data Centre Services, University Systems, University of Victoria