I found the part of the doc.

http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guides/syslog-ng-ose-v3.3-guide-admin-en.html/index.html-single.html#reference_regexp_glob

I see this in docs 3.1 and up. Don't see it in 3.0 though. I am testing on 3.2.5. Has anyone gotten glob character ranges to work ? :-) I may go regex in the end. But I do have a concern about performance. So I want to be sure glob ranges are broken/unsupported or something else before I move on.

glob
Description: Use glob patterns (that is, wildcards and character ranges) without regular expression support. The advantage of glob patterns to regular expressions is that globs can be processed much faster. For details on glob patterns, see the glob manual page (man glob).

On Fri, Jul 20, 2012 at 11:20 PM, Gergely Nagy <algernon@balabit.hu> wrote:

"T. A. Smooth" <catdaaaady@gmail.com> writes:

> Doing a "man glob" shows it can do ranges. And I thought i read some
> Syslog-ng doc that said it could do it too?

glob does support ranges, but glib's glob[1] sadly does not. If the
syslog-ng docs say somewhere it does, that is unfortunately a
documentation bug.

[1]: http://developer.gnome.org/glib/unstable/glib-Glob-style-pattern-matching.html#glib-Glob-style-pattern-matching.description

As an alternative, you can use regexps - a bit costier, but for a simple
regex, hopefully not by much.

On another hand, not supporting ranges is suprising, and in other parts
of the code, syslog-ng already uses plain old glob().. it might be worth
considering switching the matching code over too, at some point.

--
|8]

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq