[syslog-ng] [Bug 87] csv-parser: specifying drop-invalid and greedy flags always fails.

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Wed Jul 28 01:59:25 CEST 2010


https://bugzilla.balabit.com/show_bug.cgi?id=87


jsu2 at emory.edu changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jsu2 at emory.edu




--- Comment #2 from jsu2 at emory.edu  2010-07-28 01:59:25 ---
I have a similar problem with 3.0.3.  

Sample syslog message:

Jul 27 19:55:33 myhost ZabbixConnector.log : 19:55:32,782 INFO  [Thread-2834]     - [ZabbixEventSyncCommand] Processing message <?xml version="1.0"
encoding="UTF-8"?>

The following template and parser combination:
template t_esb { template("${ESB.LOG}, ${ESB.MSG}\n"); };
parser p_app_esb  { csv-parser(columns("ESB.LOG","ESB.MSG") delimiters(" ") flags(greedy)); };

Yields (yes, just the comma):
, 

If I remove the greedy flag:
ZabbixConnector.log, :

So the greedy flag breaks the parser and does not pick up the rest of the message as described.

Is this fixed in 3.0.6?


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list