[syslog-ng]match to an empty messages line
Balazs Scheidler
syslog-ng@lists.balabit.hu
Tue, 12 Apr 2005 16:55:08 +0200
On Tue, 2005-04-12 at 15:25 +0200, Stephan Hendl wrote:
> Hi all,
>
> recently I included fibrechannel switches in my central syslog-ng. The switches often send empty line among important lines. I want to drop the empty ones. How can I achieve that by means of filter rules?
syslog-ng drops really empty lines, probably it still contains
something, at least a timestamp.
you can match empty messages using:
filter f_empty { match("^$"); };
however you might still have some spaces in that in which case it
becomes:
filter f_empty { match("^ *$"); };
--
Bazsi