[syslog-ng]filter host and regex

[Stefan Schluppeck]

This is a multi-part message in MIME format.
--------------090805020003060507090404
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I use syslog-ng as a central logserver for 90 Linux Servers und 150
Network machines (router switches)

I have to write a filter for matching hosts:

The Filter looks like this:
filter f_network { host("^ch4-*") or host("^bu.1-*"); };

but this filter does not match this lines:
Oct 26 14:04:16 bu21-flur2-c3548-1 197791: %LINEPROTO-5-UPDOWN
Oct 26 14:24:10 bu19-r151-c3548-3 32761: %LINEPROTO-5-UPDOWN

Question: waht ist the right regex to match the hostnames:
bu21-flur2-c3548-1
bu19-r151-c3548-3

pleace give me some tipps, thx
- --
Mit freundlichen Grüßen / With regards

Stefan Schluppeck


Bauer Publishinggroup - Brieffach 6200 - Burchard.11 - D-20077 Hamburg
Publishing Support Center - Server & Development  -  Stefan Schluppeck
Fon:+49-40-3019-5519 - Fax:+49-40-3019-5668 - eMail:sschluppeck@hbv.de

~ <°)))))><   ><)))))°>   <°)))))><   ><)))))°>   <°)))))><   ><)))))°>

PGP-Fingerabdruck = 7DC1 E4B4 056C 5380 8C68  4B5F 5E87 227D 5632 E45F
Key-ID = 81B7CD29
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBfkP5XocifVYy5F8RAhyGAJ9c2ysTKQ9ihX9tgYTjgoJai+t6GQCgldk3
NBOaJFgZxnhSvQU9vrzWlNo=
=bRz8
-----END PGP SIGNATURE-----

--------------090805020003060507090404
Content-Type: text/x-vcard; charset=utf-8;
 name="sschluppeck.vcf"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
 filename="sschluppeck.vcf"

begin:vcard
fn:Stefan Schluppeck
n:Schluppeck;Stefan
org:Bauer Produktions KG;Server & Entwicklung
adr:Brieffach 6200;;Burchardstr. 11;Hamburg;Hamburg;20077;Germany
email;internet:sschluppeck@hbv.de
title:IT-Systemadministrator
tel;work:+49 40 3019 5519
tel;fax:+49 40 3019 5668
tel;cell:+49 160 58 00 636
note;quoted-printable:-----BEGIN PGP PUBLIC KEY BLOCK-----=0D=0A=
	Version: GnuPG v1.2.2 (GNU/Linux)=0D=0A=
	=0D=0A=
	mQGiBEAaIywRBACmy/zCiO+eAspFgY/+IElF0eceglut92NOaVAhuZ7JYRPq5T0/=0D=0A=
	42qv3CuBe7itxHI317/ZulB2tqZP1XsNFhLaqlETDSlguZSuWRUmOuh2jHzAYFbY=0D=0A=
	xVN5wFW/TP57jyEBQn+6UuNOH8SjoTHc6s80NB+q25BPknawQwumUnXhmwCgrgVF=0D=0A=
	r6vZAEAOTDaraHx9O686dv0D/ReLiZ614KxoqhamrbkZTrF/9l7RvovIRFGWLKty=0D=0A=
	Yn+ZE2JXZTMh9Z3DxMTq9xH5GofX0m6RFE4lVSmn+M8wGC0zZLQ3GKMkfNm0cx4c=0D=0A=
	6b1+8TREYJdSvZismlv0fGiZWFuKNpTFHQDjtYBUue6YqFljTAMjPJj1oAgPyEi6=0D=0A=
	hvEAA/9xIdDRhEJ6+DmCXhDNEzzFpR8b00Daad5b+ipLjHSgf19Hhzzu3PRBhptj=0D=0A=
	WrjC1q8WeSe8S2q99p/kxzklKbOlVMDUB86z5qRBrEyySNgkSKvmReyjqc3sxrp+=0D=0A=
	v1PsLo15YLfCZO5tIX6RDl8qBgYJLpl4Ttb8HOtbOjGE5kVeGrRPU3RlZmFuIFNj=0D=0A=
	aGx1cHBlY2sgKEJhdWVyIFByb2R1a3Rpb25zIEtHIDA0MCAvIDMwMTkgLSA1NTE5=0D=0A=
	KSA8c3NjaGx1cHBlY2tAaGJ2LmRlPohbBBMRAgAbBQJAGiMsBgsJCAcDAgMVAgMD=0D=0A=
	FgIBAh4BAheAAAoJEF6HIn1WMuRfWVUAnAirXS17ejB70DLTkFjn953Oz1p4AJ9a=0D=0A=
	loW6yK3TDEOmC52xu0Km7915V4hGBBMRAgAGBQJAGkrSAAoJEFMU1gbwYmDra68A=0D=0A=
	nRnbs93wANUgvna7qP2c7vrTDBkvAJ9PaCJXvuqEoTZAw0MI1DKfyepy7bkCDQRA=0D=0A=
	GiNFEAgAsfzk4kOi3FQZEFskK+fTYkf7Fc9YOpvBu6MILHy53tHrqt0z62/vF27x=0D=0A=
	AnfWwP9LPiNR6ZForG2wHTqyWmtouvBVuWI9cj7Ss6QRcOBlknrq8IggL5qMTH8v=0D=0A=
	UezuQDJtK6tOstUHIgHHAwV+eHIawNKKjYAYQwOKcHWPlnXH7r7pUnLfTkT6h2hV=0D=0A=
	NxfeJks1MVdpfr1POvCjZx6Nww/xEUTFMRErIsaz+Pi9+hgbz3z8VhgaAiPbWyfz=0D=0A=
	Jg0u7Bagnmm/CTyH6ffC7hnLIVf4LOORSQj5rDMdl5toqyYEZd8b8lvthQgrD2kK=0D=0A=
	/ndtumTRNWmwBTWquyP/LFD3gX0EDwADBQf/X4wUCflHPfAczaOosJFV5nPwRxR1=0D=0A=
	WSaJZkCU4Gj3O5ofgqeIrEw/C4oMmaKat4VObcbFrQndHSu2p3CdrqXPz5BosiAl=0D=0A=
	Lu8GKW1YroJ2c71XajtleLePaH4WUU3C2TkdaVmM6tmW9k8kw7gqsnP68/wwagkc=0D=0A=
	zyW6Pwhl5tUH/35dlrBlZ613BjYJXQuXs8irbqLTsPhIh14jAXsvTRxvHKGwllSL=0D=0A=
	cNEBzd6QwYcSrnzlVhttGNpWNwvi8D0NVumEYXsqGCHM05KEEFz85sGrO8Buh9n6=0D=0A=
	rk7VGem5kc153xh2TDdbOXI3s4M/1Olis2E55TGMwvXvR99x1xqks7lMpohGBBgR=0D=0A=
	AgAGBQJAGiNFAAoJEF6HIn1WMuRf0/wAoJoRZuB1r6dmwBcHFD/NgYkOrRerAJwO=0D=0A=
	qBfTZ1Dk9Obz1F7D5+weZxuN9w=3D=3D=0D=0A=
	=3DTlRs=0D=0A=
	-----END PGP PUBLIC KEY BLOCK-----=0D=0A=
	
x-mozilla-html:FALSE
url:http://www.hbv.de
version:2.1
end:vcard


--------------090805020003060507090404--