Hi!

I think, the negative notation could solve this situation eg.: $MACRO@-N would mean the first Nth message in the context and not the last Nth. I checked the code and it is not terrible hard to implement. I can make a PoC for you in the next week, if you would like to test it.

Regards,
Viktor


On Tue, Jul 8, 2014 at 11:54 AM, Fabien Wernli <wernli@in2p3.fr> wrote:
Hi,

I'm AFK for a while but did you check out the `grep` template function?

Cheers
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq