[syslog-ng] escaping \[ not respected

Geller, Sandor (IT) Sandor.Geller at morganstanley.com
Wed Oct 1 10:24:53 CEST 2008


> targeted string is "unknown[a.b.c.d]"
> my filter:
> filter f_conn_from_unk_private { not match
> ("unknown\[(10\.1\.|10\.2\.|10\.10\.5\.|192\.168\.200)"); };
> error:
> Error compiling regular expression;
> re='[(10.1.|10.2.|10.10.5.|192.168.200)', error='brackets ([
]) not balanced'

I can't confirm this behaviour, as the following does work for me:

filter f_internal_statistics {
    match("^syslog-ng\[[[:digit:]]+.: STATS") or match ("^syslog-ng\[[[:digit:]]+\]: Log statistics");

What syslog-ng version are you using? Mine is 2.0.9



NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.

More information about the syslog-ng mailing list