[syslog-ng] pattern matching on xxx#

Balazs Scheidler bazsi at balabit.hu
Sat Oct 16 06:39:47 CEST 2010


On Fri, 2010-10-15 at 14:43 -0500, Martin Holste wrote:
> I'll chime in here to once again recommending piping to Perl using
> program() if you have crazy stuff to do.  In your case, you could have
> a very simple (one liner, really) script that does the regex hostname
> rewrite so that hostXX would get rewritten to just XX or something
> easy for syslog-ng to filter on and route to the appropriate
> destination.  Just have a socket source available as the destination
> from Perl and a source in syslog-ng to complete the circuit.

syslog-ng itself is able to do regexp transformations, it is just hidden
under "filter" currently. you don't need to pipe out perl and back
again.

-- 
Bazsi




More information about the syslog-ng mailing list