[syslog-ng] Case Insensitive Match?

[Hari Sekhon]

Balazs Scheidler wrote:
> On Mon, 2006-08-07 at 18:10 +0100, Hari Sekhon wrote:
>   
>> Is there a way I can do a case insensitive match in syslog-ng?
>>
>> Every place I've seen from grep to python to perl has their own way of 
>> doing the case insensitive flag.
>>
>> So how do I set the case-insensitive match flag in syslog-ng?
>>     
>
> Simple answer: you can't. Longer answer: you can't currently as noone
> has ever asked this before (or at least I can't remember).
>
> Do you happen to have a suggestion how this should look like?
>
>   
It could either stick to the syslog-ng style with a flag() set within 
match(),
or perhaps a character at the end of the string eg. "someregex"i (like 
perl's /someregex/i )

or cleaner would be just to make imatch() to do insensitive matches...


Not being able to do case insensitive searches is an extreme handicap if 
trying to fully leverage syslog-ng filters.

imagine

match("login failed")

instead becomes

match("[Ll][Oo][Gg][Ii][Nn] [Ff][Aa][Ii][Ll][Ee][Dd]")

not quite as readable and sticky when you want to match anything longer..


Hari
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20060808/1cf1d0f4/attachment.html