[syslog-ng]Macro Substitution

Jeremy Shaffner jshaffner@dmisi.com
Wed, 10 Oct 2001 15:26:39 -0500


Howdy,

I'm currently using a template to output logs to a pipe for importing
into a DB.  Is it possible to isolate a portion of the $MSG macro using
regexps?  Such that it equates to:

echo $MSG | sed 's/denied ip \(1.1.1.1\) -> \(2.2.2.2\)/\1 \2/'

I'm trying to put the IPs in their own column in the table.

Thanks,

-- 

-Jeremy