[syslog-ng]100% newbie match question

Aaron Jackson syslog-ng@lists.balabit.hu
Mon, 19 May 2003 11:37:58 -0400


Not tested in any way, but maybe

  not match(^FOO)

in one of the filters might work.

Aaron

On Monday, May 19, 2003, at 09:58 AM, Michael Hare wrote:

> Guys-
>
> I know a little bit about syslog-ng, and a little bit about regular
> expressions.  I haven't been able to put the two together to come up 
> with a
> match expression that has the following behavior; match lines that do 
> -not-
> contain word FOO.  The thing I tried that I thought would work, but 
> didn't,
> was "^[FOO]".
>
> Help?
>
> Thanks-
> -Michael
>
> /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
> Michael Hare
> UW-Madison/WiscNet Network Engineering
> My phone: 608-262-5236
> 24-Hour NOC: 608-263-4188
> WiscNet: 608-265-6761
>
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html