1 Mar
2019
1 Mar
'19
11:50 a.m.
On Fri, Mar 01, 2019 at 11:34:00AM +0100, Péter, Kókai wrote:
Hello,
Based on your example one possible solution could be: match("cmd=username [a-z]+ privilege 15" value("MESSAGE"));
You could also check out the syslog-ng administrator guide, it covers a lot of possibilities: https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edit...
also, prefer single quotes over double quotes: will make escaping easier