11 Dec
2003
11 Dec
'03
10:09 p.m.
Hello friends, I am trying to match the following entry with syslog-ng 1.6.0rc4: Dec 11 15:25:10 log_source@pawan amavis[29961]: (29961-01-2) Passed, <syslog-ng-admin@lists.balabit.hu> -> <allanwind@lifeintegrity.com>, Message-ID: <20031211202502.22100.73262.Mailman@www.balabit.hu>, Hits: -1.364 And expected this to do the trick (after a bit of trial and error and checking the archives): match("^\\(.*Passed, ") and eventually match("^\\(\d+-\d+\\) Passed") however neither works. If I leave out "\\(" on the first match, it works as expected. Any ideas? /Allan -- Allan Wind P.O. Box 2022 Woburn, MA 01888-0022 USA