16 Oct
2010
16 Oct
'10
5:39 a.m.
On Fri, 2010-10-15 at 14:43 -0500, Martin Holste wrote:
I'll chime in here to once again recommending piping to Perl using program() if you have crazy stuff to do. In your case, you could have a very simple (one liner, really) script that does the regex hostname rewrite so that hostXX would get rewritten to just XX or something easy for syslog-ng to filter on and route to the appropriate destination. Just have a socket source available as the destination from Perl and a source in syslog-ng to complete the circuit.
syslog-ng itself is able to do regexp transformations, it is just hidden under "filter" currently. you don't need to pipe out perl and back again. -- Bazsi