When regexing in syslog-ng, does this stament below do: get all local7 ( all levels ) and _/ALSO/_ match %ETHC-5 / %CLEAR-5 ? Its not just matching those is it ? Im kinda confused on this syntax. filter f_local7 { facility(local7) and level(debug..emerg) and match("%ETHC-5") and match("%CLEAR-5"); }; I just want to make shure that is what this is doing... . Thanks all. ~!>D
cdowns <cdowns@drippingdead.com> - Fri, Mar 26, 2004:
get all local7 ( all levels ) and _/ALSO/_ match %ETHC-5 / %CLEAR-5 ?
What does your "/" mean? The statement you show is a logical and between the three conditions, meaning that all of them must be satisfied. Ie, you must have a message from local7 matching %ETHC-5 and matching %CLEAR-5 to get through your filter. -- Loïc Minier <lool@dooz.org>
ok cool that makes sense. It looks like the email changed italic text into "/" .. thanks. ~!>D Loic Minier wrote:
cdowns <cdowns@drippingdead.com> - Fri, Mar 26, 2004:
get all local7 ( all levels ) and _/ALSO/_ match %ETHC-5 / %CLEAR-5 ?
What does your "/" mean?
The statement you show is a logical and between the three conditions, meaning that all of them must be satisfied. Ie, you must have a message from local7 matching %ETHC-5 and matching %CLEAR-5 to get through your filter.
participants (2)
-
cdowns
-
Loic Minier