[syslog-ng]Quoting ( and ) in a match

Jim Mozley syslog-ng@lists.balabit.hu
Tue, 16 Dec 2003 09:52:46 +0000


Allan Wind wrote:

> Hello friends,
> 
> I am trying to match the following entry with syslog-ng 1.6.0rc4:
> 
> Dec 11 15:25:10 log_source@pawan amavis[29961]: (29961-01-2) Passed,
> <syslog-ng-admin@lists.balabit.hu> -> <allanwind@lifeintegrity.com>,
> Message-ID: <20031211202502.22100.73262.Mailman@www.balabit.hu>, Hits: -1.364
> 
> And expected this to do the trick (after a bit of trial and error and
> checking the archives):
> 
> match("^\\(.*Passed, ")
> 
> and eventually
> 
> match("^\\(\d+-\d+\\) Passed")

What is it that you are trying to match?

Is it "(ddddd-dd-d) Passed"?

i.e. parenthesis, 5 digits, hyphen, 2 digits, hypen, 1 digit, 
parenthesis, space and the word Passed?

Jim