[syslog-ng] db-parser issues

Jakub Jankowski shasta at toxcorp.com
Tue Jun 2 12:42:13 CEST 2009


On 2009-06-02, Robert Fekete wrote:

> I think the problem is that you define a pattern in your xml for the program 
> as well:
>>  <program name='logger'>
>>   <pattern>param</pattern>
> The <pattern> tag overrides the <program name>, so instead of logger, 
> syslog-ng thinks this rule applies to messages that have "param" in their 
> PROGRAM field.

In addition to what you've quoted above, I also tried:

1. <program name='logger'>
     <pattern>logger</pattern>

2. <program name='somethingirrelevant'>
     <pattern>logger</pattern>

and even without <pattern>:

3. <program name='logger'>


All of these give me the same result - no match. Any other suggestions?


Cheers,
  Jakub.

-- 
Jakub Jankowski|shasta at toxcorp.com|http://toxcorp.com/
GPG: FCBF F03D 9ADB B768 8B92 BB52 0341 9037 A875 942D


More information about the syslog-ng mailing list