[syslog-ng] subst() pcre escape sequences

Patrick H. syslogng at feystorm.net
Thu Mar 11 00:47:19 CET 2010


Ok, I'm trying to lowercase a certain macro with a pcre rewrite rule. 
Unfortunately it doesnt seem to be observing pcre escape sequences.
subst('^(.+)$','\L$1\E',value('FROM') flags('store-matches') 
type('pcre')); (the FROM macro is created from the named match of an 
earlier pcre filter()
It ends up just putting a literal '\L' and '\E' at the start and end of 
the string. Is this a bug, or am I doing something wrong, or is there 
another way to do this?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100310/2359f5a1/attachment.htm 


More information about the syslog-ng mailing list