29 Sep
2010
29 Sep
'10
12:35 p.m.
Hello, On 09/29/2010 01:26 PM, Balazs Scheidler wrote:
- how should Anonymous login be handled? @QSTRING:useracct.username: @ vs. <value name="usracct.username">Anonymous</value>
anonymous should be handled just like any other username, although it is canonically written as "anonymous" e.g. lower case.
Anonymous is logged differently, so it can't be handled with the same rule: "Anonymous user logged in" vs. "czanik is now logged in" Considering that the lower case name is preferred, I'd say, that we should use the second way, but use a lowercase "anonymous": <value name="usracct.username">anonymous</value> Bye, -- Peter Czanik (CzP) <czanik@balabit.hu> BalaBit IT Security / syslog-ng upstream http://czanik.blogs.balabit.com/