21 Dec
2011
21 Dec
'11
1:08 p.m.
On Thu, 2011-12-15 at 08:53 -0500, vincent@ragosta.net wrote:
Is it possible to specify a restriction on the minimum length of a syslog message? We often receive small, malformed messages that we do not want to transmit.
Right now it isn't. Maybe if you could match against them with a regexp, though that could be expensive. IIRC PCRE has repetition count limits, so you could do something like: To match for maximum 16 characters. filter f_malformed { match('.{,16}'); }; I'm not sure about the syntax though. -- Bazsi