[syslog-ng]filter match()
Jonas Lundgren
syslog-ng@lists.balabit.hu
Fri, 6 Jun 2003 11:34:52 +0200
> Hi all,
>
> during some extensive test on syslog-ng, I found something that really make me difficult to implement some filters.
>
> I need to match same EXACT messages, and so I used something like match("^MATCHTHIS$") in a filter statement...
>
> but I find that the match will consider the message starting from the program name...
>
> Is there any way to match JUST the message part without the program one ??? ( the program() just work on the program part of the message, so i expected that match() will work on the other one... )
>
> Thanks in advance
>
>
> Amodiovalerio Verde
>
> amodiovalerio.verde@ags-it.com
> amover@libero.it
>
> _______________________________________________
> syslog-ng maillist - syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
A regexp won't slow things down.