Hello all, Thanks a lot for the time and hints provided. We will try to figure for each proposed solution how to implement it and come back with further questions or with the final implementation. Best regards, Ioan On Thu, Feb 17, 2011 at 7:23 PM, Matthew Hall <mhall@mhcomputing.net> wrote:
On Thu, Feb 17, 2011 at 02:39:27PM +0100, Gergely Nagy wrote:
URL parameters could be extracted as a single string first, and fed to a CSV-parser, that'd do the job of extracting the fields. You'd need to combine patterndb with the CSV parser, though, and I'm not quite sure how one would go about doing that, or if it's even possible.
It's possible. Bazsi often recommends it to those of us with more complex messages to parse. ;-)
Matthew. ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html