[syslog-ng]host() regular expressions

Treptow, Craig syslog-ng@lists.balabit.hu
Mon, 23 Feb 2004 11:47:00 -0600


Hi folks.  I just started running syslog-ng in test mode while I work =
out some issues and experiment.  The version is 1.6.2 running on Solaris =
8.

I'm attempting to match subsets of hostnames like this:

corp1-fw-pbx-1
corp1-fw-pbx-2
indharrisburg1pa-fw-1

I've been trying to match firewalls with names ending in 1 or 3, but am =
having no success:

filter f_testnotify {
        (host("/.*\-fw\-.*(1|3)")) and
        (match("denied"));
};

The reference documentation doesn't seem to cover this in detail.  If =
somebody could help me, or point me to some more detailed documentation, =
I would appreciate it.

Also, are the archives to this list searchable?  I haven't been able to =
find that either.

Thanks,

Craig