Howto configure grep to parse multiple mail recipients
Hi all, I am trying to parse some Ironport logs to cacth mutliple destination recipients using grep in value option: recipient: $(grep ("${to_address}" != "") ${to_address}) but it doesn't works ... What am I doing wrong?? I am using syslog-ng 3.3.5 under CentOS6. Thanks.
On Thu, May 24, 2012 at 2:32 PM, C. L. Martinez <carlopmart@gmail.com> wrote:
Hi all,
I am trying to parse some Ironport logs to cacth mutliple destination recipients using grep in value option:
recipient: $(grep ("${to_address}" != "") ${to_address})
but it doesn't works ...
What am I doing wrong?? I am using syslog-ng 3.3.5 under CentOS6.
Please, any help??
On Fri, 2012-05-25 at 08:43 +0200, C. L. Martinez wrote:
On Thu, May 24, 2012 at 2:32 PM, C. L. Martinez <carlopmart@gmail.com> wrote:
Hi all,
I am trying to parse some Ironport logs to cacth mutliple destination recipients using grep in value option:
recipient: $(grep ("${to_address}" != "") ${to_address})
but it doesn't works ...
What am I doing wrong?? I am using syslog-ng 3.3.5 under CentOS6.
$(grep) is a template function, that only makes sense to be used in a patterndb correllation rule. Are you using it in that context? Otherwise you'd proably be looking for a simple filter. -- Bazsi
On Sunday, May 27, 2012, Balazs Scheidler <bazsi77@gmail.com> wrote:
On Fri, 2012-05-25 at 08:43 +0200, C. L. Martinez wrote:
On Thu, May 24, 2012 at 2:32 PM, C. L. Martinez <carlopmart@gmail.com> wrote:
Hi all,
I am trying to parse some Ironport logs to cacth mutliple destination recipients using grep in value option:
recipient: $(grep ("${to_address}" != "") ${to_address})
but it doesn't works ...
What am I doing wrong?? I am using syslog-ng 3.3.5 under CentOS6.
$(grep) is a template function, that only makes sense to be used in a patterndb correllation rule.
That's exactly what i need. I need to use inside a pattern to correlate mail logs.
Are you using it in that context? Otherwise you'd proably be looking for a simple filter.
A filter? I don't see how to do this inside a pattern
-- Bazsi
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
On Sun, May 27, 2012 at 5:50 PM, C. L. Martinez <carlopmart@gmail.com> wrote:
On Sunday, May 27, 2012, Balazs Scheidler <bazsi77@gmail.com> wrote:
On Fri, 2012-05-25 at 08:43 +0200, C. L. Martinez wrote:
On Thu, May 24, 2012 at 2:32 PM, C. L. Martinez <carlopmart@gmail.com> wrote:
Hi all,
I am trying to parse some Ironport logs to cacth mutliple destination recipients using grep in value option:
recipient: $(grep ("${to_address}" != "") ${to_address})
but it doesn't works ...
What am I doing wrong?? I am using syslog-ng 3.3.5 under CentOS6.
$(grep) is a template function, that only makes sense to be used in a patterndb correllation rule.
That's exactly what i need. I need to use inside a pattern to correlate mail logs.
Are you using it in that context? Otherwise you'd proably be looking for a simple filter.
A filter? I don't see how to do this inside a pattern
Please, any help?
participants (2)
-
Balazs Scheidler
-
C. L. Martinez