Re: [syslog-ng] Help getting my rewrite to work

19 Jul 2013

      Hi Dave,
...
rewrite r_rewrite_4624_2 { subst("interactive", "QuackApple",
value("MSGONLY"));};
I'm using something similar, but am using the type and flags options:

rewrite r_use_basename {
    subst(
        "/var/log/apache2/",
        "",
        value(".SDATA.file@18372.4.name")
        type("string")
        flags("prefix")
    );
};
...
From the admin pdf:
string
Description: Match the strings literally, without regular expression
support. By default, only identical strings are
matched. For partial matches, use the flags("prefix") or the
flags("substring") flags.

One would think that your regex would match, though.

Cheers,

-mz

Re: [syslog-ng] Help getting my rewrite to work

Matt Zagrabelny