Here is an example for using the inlist filter together with the patterndb parser: https://czanik.blogs.balabit.com/2013/09/black-cat-white-cat/ In this case patterndb extract IP addresses from log messages which are checked using the inlist filter.

Bye,


On Wed, Oct 4, 2017 at 8:14 AM, Fabien Wernli <wernli@in2p3.fr> wrote:
On Tue, Oct 03, 2017 at 04:10:39PM -0400, Gopi Joshi wrote:
> I am trying to filter messages matching text stored in a txt file (plain
> txt , exact match , one word each line). but its not working

As Péter suggested, you should first extract the username from the MESSAGE,
for instance using one of the parsers (kv, csv, db, …), and then apply the
in-list filter to that extracted macro

Cheers

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq