[syslog-ng]filter match()

Jonas Lundgren syslog-ng@lists.balabit.hu
Fri, 6 Jun 2003 11:34:52 +0200


> Hi all,
> 
> during some extensive test on syslog-ng, I found something that really make me difficult to implement some filters.
> 
> I need to match same EXACT messages, and so I used something like match("^MATCHTHIS$") in a filter statement...
> 
> but I find that the match will consider the message starting from the program name...
> 
> Is there any way to match JUST the message part without the program one ??? ( the program() just work on the program part of the message, so i expected that match() will work on the other one... )
> 
> Thanks in advance
> 
> 
> Amodiovalerio Verde
> 
> amodiovalerio.verde@ags-it.com
> amover@libero.it
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> 

A regexp won't slow things down.