[syslog-ng]host() regular expressions
Treptow, Craig
syslog-ng@lists.balabit.hu
Mon, 23 Feb 2004 11:47:00 -0600
Hi folks. I just started running syslog-ng in test mode while I work =
out some issues and experiment. The version is 1.6.2 running on Solaris =
8.
I'm attempting to match subsets of hostnames like this:
corp1-fw-pbx-1
corp1-fw-pbx-2
indharrisburg1pa-fw-1
I've been trying to match firewalls with names ending in 1 or 3, but am =
having no success:
filter f_testnotify {
(host("/.*\-fw\-.*(1|3)")) and
(match("denied"));
};
The reference documentation doesn't seem to cover this in detail. If =
somebody could help me, or point me to some more detailed documentation, =
I would appreciate it.
Also, are the archives to this list searchable? I haven't been able to =
find that either.
Thanks,
Craig