Can you expand on how the FILE_NAME macro could be used? I don't understand how it could be helpful. The documentation says it the location where syslog-ng received the message. The messages are coming from a network source, my goal is to categorize them into separate files on the filesystem based on various filter matches. I must be missing something. Thanks, -Mark Mark Faine System Administrator SAIC/NICS 215 Wynn Dr. 5065 Huntsville, AL 35805 256-961-1295 (Desk) 256-617-4861 (Work Cell) -----Original Message----- From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> On Behalf Of Fabien Wernli Sent: Monday, March 25, 2019 3:39 AM To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] Setting and using variables Hi Mark, On Fri, Mar 22, 2019 at 01:37:29PM +0000, Faine, Mark R. (MSFC-IS40)[NICS] wrote:
Is there a way to set variables in syslog-ng?
You can set arbitrary variables or tags using a rewrite: rewrite r_my_tags_and_vars { set-tag('foo'); set('foo', value('bar')); }; In your particular example, you could also use the existing FILE_NAME macro. Cheers ______________________________________________________________________________ Member info: https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.balabit.hu_mailma... Documentation: https://urldefense.proofpoint.com/v2/url?u=http-3A__www.balabit.com_support_... FAQ: https://urldefense.proofpoint.com/v2/url?u=http-3A__www.balabit.com_wiki_sys...