[syslog-ng] pcre matches

Patrick H. syslogng at feystorm.net
Thu Mar 4 23:23:59 CET 2010


How do you use pcre named pattern matches with store-matches?
I've been trying to do things like
message("IP: (?<ip>\S+)" flags(store-matches) type("pcre"))
and then insert into a database with things like
values("$ip") or values("$+{ip}")
and nothing works.
I cant seem to find any examples of usage through google either.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100304/d1cf2dfe/attachment.htm 


More information about the syslog-ng mailing list