I think the restriction should be removed. Viktor, do you agree?
Technically speaking, any non-alphanumeric character will terminate the
TAG field at the beginning
of the message. This is usually one of : [ or space as in the examples
program: this is the message
program[123]: this is the message
program this is the message
In practice though, syslog daemons will send TAGs that contain any
character and the syslog-ng Agent for Windows
will forward the application name as it shows in the Windows Event Log.
In some cases, this TAG will contain a $ character.
The patterndb-4.xsd definition disallows the $ character in the program
pattern in pattern database files.
Can this restriction be removed to allow for the $ or is this a larger
issue that I see?
Thanks again for all of the support.
Evan.
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq