Sent: Mon Feb 27 2012 13:18:03 GMT-0500 (EST) From: Ti Leggett <leggett@mcs.anl.gov> To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Rewrite backreference oddity
I have a rewrite rule that is used to replace private IPs that have no DNS name to an internally used name. It looks like:
rewrite r_ddn { subst("172.30.60.(\d*)", "d9550-$1.example.com", value("HOST"), type("pcre")); };
For IP 172.30.60.1 I should get a HOST that is d9550-1.example.com, but what I actually get is d9550-.example.com1. Any ideas what I'm doing incorrectly? I've tried encapsulating the back reference in {}. Here's info about my syslog-ng: You shouldnt have a comma before the `type`. The config parser might be allowing this, though the general syntax used is to not have one.
Also try using `flags(store-matches)` -Patrick