19 Oct
2014
19 Oct
'14
11:47 p.m.
Technically speaking, any non-alphanumeric character will terminate the TAG field at the beginning of the message. This is usually one of : [ or space as in the examples program: this is the message program[123]: this is the message program this is the message In practice though, syslog daemons will send TAGs that contain any character and the syslog-ng Agent for Windows will forward the application name as it shows in the Windows Event Log. In some cases, this TAG will contain a $ character. The patterndb-4.xsd definition disallows the $ character in the program pattern in pattern database files. Can this restriction be removed to allow for the $ or is this a larger issue that I see? Thanks again for all of the support. Evan.