[syslog-ng]match to an empty messages line
   
    Balazs Scheidler
     
    syslog-ng@lists.balabit.hu
       
    Tue, 12 Apr 2005 16:55:08 +0200
    
    
  
On Tue, 2005-04-12 at 15:25 +0200, Stephan Hendl wrote:
> Hi all,
> 
> recently I included fibrechannel switches in my central syslog-ng. The switches often send empty line among important lines. I want to drop the empty ones. How can I achieve that by means of filter rules?
syslog-ng drops really empty lines, probably it still contains
something, at least a timestamp.
you can match empty messages using:
filter f_empty { match("^$"); };
however you might still have some spaces in that in which case it
becomes:
filter f_empty { match("^ *$"); };
-- 
Bazsi