1 Jul
2006
1 Jul
'06
4:40 p.m.
On Thu, 2006-06-29 at 14:48 +0200, Hubert Lang wrote:
Hello,
i have a few questions about the message parser, basically i want to parse/split up the MESSAGE field itself and write the splitted up message in a mysql database, i cant find any documents about how this can be done, do i need an external parser (perl or whatever) or can this be done within syslog-ng.conf?
right now i just can write the whole message to the mysqldb
In 1.9.x you can match patterns in the message and then reference the matches in templates via $N (where N is the sequence number of the match), similar to what perl has. -- Bazsi