Hello Fabien, Thank you for the example, I can now see what you have done and changes respond as I expect. Now on to start my own :) Thanks Again! rgds, Nick On 17 December 2013 12:19, Fabien Wernli <wernli@in2p3.fr> wrote:
Hi,
On Tue, Dec 17, 2013 at 12:07:41PM +0000, Nick wrote:
[1] I have added a program attribute.
Note that the "program" attribute of "test_message" needs to match the rule's "pattern" text if you want a match.
[3] I agree that the pattern is wrong, the output above shows that but
Try the following: https://gist.github.com/faxm0dem/b2c87efb098b4aba1969
[4] I assume you mean "pdbtool patternize -f testfile.log" ? I'm not sure how that helps...
Actually I meant 'pdbtool match'
Sadly, 'patternize' failed to help me in the past, maybe someone else can comment on that.
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Shameless plug for google Juice: http://www.linickx.com