On Sunday, May 27, 2012, Balazs Scheidler <bazsi77@gmail.com> wrote:
> On Fri, 2012-05-25 at 08:43 +0200, C. L. Martinez wrote:
>> On Thu, May 24, 2012 at 2:32 PM, C. L. Martinez <carlopmart@gmail.com> wrote:
>> > Hi all,
>> >
>> >  I am trying to parse some Ironport logs to cacth mutliple destination
>> > recipients using grep in value option:
>> >
>> > recipient: $(grep ("${to_address}" != "") ${to_address})
>> >
>> > but it doesn't works ...
>> >
>> >  What am I doing wrong?? I am using syslog-ng 3.3.5 under CentOS6.
>> >
>
> $(grep) is a template function, that only makes sense to be used in a
> patterndb correllation rule.
>

That's exactly what i need. I need to use inside a pattern to correlate mail logs.

> Are you using it in that context? Otherwise you'd proably be looking for
> a simple filter.

A filter?  I don't see how to do this inside a pattern

>
> --
> Bazsi
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>