[syslog-ng]Filter enhancement
Nate Campi
nate@campin.net
Thu, 6 Dec 2001 11:03:34 -0800
begin Jay Guerette quotation of Tue, Dec 04, 2001 at 04:28:24PM -0500:
> I have an idea for a filter function:
>
> I would like to filter messages through an external program, ideally spawned
> as a child process like the 'program()' destination target.
>
> This could serve 2 functions:
> 1. Perform more complex filtering, or dynamic filtering based on input from a
> database or other 3rd source.
> 2. Reformat the messages as they pass through the filter.
>
> A message could be sent to the external process via STDIN, it is evaluated
> and conditionally sent back via STDOUT. If a message is to be dropped
> according to the filter criteria of the external process, it would have to
> sendback a NULL character to syslog-ng as an indicator.
Of course we would like to have PCRE at our disposal for this filtering,
if we're going to go to the trouble to implement this.
Just thought I'd mention that.
--
Nate Campi http://www.campin.net GnuPG key: 0xC17AEF79
Key fingerprint = BF12 722F 8799 E614 33CC FAB7 5A90 C464 C17A EF79
The three Rs of Microsoft support: Retry, Reboot, Reinstall.