[syslog-ng] [PATCH] anonymizing filter

Balazs Scheidler bazsi at balabit.hu
Thu Nov 6 11:10:51 CET 2008


On Tue, 2007-12-04 at 09:38 +0100, Balazs Scheidler wrote:
> On Mon, 2007-12-03 at 15:17 -0500, Micah Anderson wrote:
> > * Balazs Scheidler <bazsi at balabit.hu> [071203 02:50]:
> > > I understand that the need is genuine and the feature this patch
> > > provides is useful, but exactly as Evan wrote in his email, its
> > > implementation is way out of the syslog-ng model. It uses filters to
> > > rewrite parts of the message.
> >  
> > I agree that there may be better ways to do this, however it is my
> > understanding that the 'general message rewrite facility' is not
> > currently anything other than a proposal. When is this expected to be
> > available so we can do this the 'right' way? If it is far off, could
> > this patch be accepted until that is available and it can be replaced
> > with the better way?
> 
> True, but removing a feature later/making an incompatible change in the
> configuration file is always a pain, and I'll be the one to explain it
> to other users who did not follow this discussion.
> 
> I'm doing the design of the next major syslog-ng release right now, and
> I'll make sure this feature sticks somewhere.
> 

Just to let you know the current syslog-ng 3.0 git tree has
functionality that should address this issue.

Please let me know if I missed something during development.

Here's the documentation:

http://www.balabit.com/dl/html/syslog-ng-v3.0-guide-admin-en.html/ch03s09.html

-- 
Bazsi




More information about the syslog-ng mailing list