So, It seems in-list is uses a simple string match. I think for most of the usecases it would be great if matching can be configured for in-list (like glob, posix etc). Do you think it worth a feature request? :) Thx L:
On 2019. Oct 3., at 18:49, László Pál <vlad@vlad.hu> wrote:
Hi,
I have a strange (at least to me :) issue. In my new system I’m heavily using in-list in my filters to tell which logs should be forwarded.
In my lists it is sometimes hostnames, sometimes programs sometimes source IP, but it is very erratic. What I think because I’m using it wrong.
What exact pattern matching is used in this feature? Is this posix regex or simply glob?
I have lines like this in my files 1.2..3.4 Host.domain.com ssh.* host.*
The problem is, sometimes it is matches sometimes not….
So, my question is how to use it to work properly?
Unfortunately the admin guide is quite poor around this subject
Thanks Laszlo