Re: [syslog-ng] Bazsi's blog: Syslog-ng correllation

On Sat, 2010-10-16 at 09:24 -0500, Martin Holste wrote:

Ok, got it. Now what about applying to other variables like this:

<value name="usracct.username">$(if "${usracct.username}" == "root" "root" "normal user")</value>

Or additional embedded conditionals (MySQL-style) like this:

<value name="usracct.username">$(if "${usracct.username}" == "root" $(if "${usracct.username}" == "joe" "admin" "normal user") "normal user")</value>

this is also possible of course. -- Bazsi