[syslog-ng] [PATCH] anonymizing filter
bazsi at balabit.hu
Thu Nov 6 11:10:51 CET 2008
On Tue, 2007-12-04 at 09:38 +0100, Balazs Scheidler wrote:
> On Mon, 2007-12-03 at 15:17 -0500, Micah Anderson wrote:
> > * Balazs Scheidler <bazsi at balabit.hu> [071203 02:50]:
> > > I understand that the need is genuine and the feature this patch
> > > provides is useful, but exactly as Evan wrote in his email, its
> > > implementation is way out of the syslog-ng model. It uses filters to
> > > rewrite parts of the message.
> > I agree that there may be better ways to do this, however it is my
> > understanding that the 'general message rewrite facility' is not
> > currently anything other than a proposal. When is this expected to be
> > available so we can do this the 'right' way? If it is far off, could
> > this patch be accepted until that is available and it can be replaced
> > with the better way?
> True, but removing a feature later/making an incompatible change in the
> configuration file is always a pain, and I'll be the one to explain it
> to other users who did not follow this discussion.
> I'm doing the design of the next major syslog-ng release right now, and
> I'll make sure this feature sticks somewhere.
Just to let you know the current syslog-ng 3.0 git tree has
functionality that should address this issue.
Please let me know if I missed something during development.
Here's the documentation:
More information about the syslog-ng