[syslog-ng]match to an empty messages line

Balazs Scheidler syslog-ng@lists.balabit.hu
Tue, 12 Apr 2005 16:55:08 +0200


On Tue, 2005-04-12 at 15:25 +0200, Stephan Hendl wrote:
> Hi all,
> 
> recently I included fibrechannel switches in my central syslog-ng. The switches often send empty line among important lines. I want to drop the empty ones. How can I achieve that by means of filter rules?

syslog-ng drops really empty lines, probably it still contains
something, at least a timestamp.

you can match empty messages using:

filter f_empty { match("^$"); };

however you might still have some spaces in that in which case it
becomes:

filter f_empty { match("^ *$"); };

-- 
Bazsi