[syslog-ng] $MSG parsing question

[Balazs Scheidler]

On Thu, 2006-06-29 at 14:48 +0200, Hubert Lang wrote:
> Hello,
> 
> 
> i have a few questions about the message parser, basically
> i want to parse/split up the MESSAGE field
> itself and write the splitted up message in a mysql
> database, i cant find any documents about how this
> can be done, do i need an external parser (perl or
> whatever) or can this be done within syslog-ng.conf?
> 
> 
> right now i just can write the whole message to the mysqldb

In 1.9.x you can match patterns in the message and then reference the
matches in templates via $N (where N is the sequence number of the
match), similar to what perl has.

-- 
Bazsi