[syslog-ng] How does regex work with HOST definitions?

catenate infosec at gmail.com
Thu Sep 29 07:23:28 CEST 2005


On 9/28/05, Jason Haar <Jason.Haar at trimble.co.nz> wrote:
>
> Hi there
>
> Has anyone any idea about this? It looks to me that regex don't work on
> the "host()" options at all. I have mine set to a regex, and it's
> capturing all sorts of traffic from other syslog clients that don't
> match :-(


Remove the backslashes before the hyphens - you'd only need to do that
inside a character class, e.g. [a-z\-] to match any of a through z and
hyphen. Outside a character class it means itself (or if it's the first
character in a character class and not escaped, like this [-a-z]).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20050928/b1c5e21c/attachment.htm


More information about the syslog-ng mailing list