Hi Martin,

patterndb uses GMarkupParser from glib to process the xml, which unfortunately has quite limited support of entities, a description of what is supported can be found here: http://developer.gnome.org/glib/2.28/glib-Simple-XML-Subset-Parser.html#glib-Simple-XML-Subset-Parser.description

Basically only the most common 5 entities can be used. If you add the nonprintable char to your patterndb as is, it should work as a literal match, but is not easy to maintain of course.

Balint

On 11/07/2012 04:51 PM, Martin Holste wrote:

I'm trying to find a way to use non-printable characters to delimit messages to avoid problems with escaping message delimiters. However, I'm having trouble representing any special characters in the patterndb.xml file. Specifically, I'd like to use characters like those found here: http://en.wikipedia.org/wiki/List_of_XML_and_HTML_character_entity_references#Character_entity_references_in_HTML such as U+200C. Trying to use the XML entity name, &zwnj; results in an error: "Entity name \'zwnj\' is not known." Is there a place that lists what entities are allowed in the XML?

Thanks,

Martin
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq