[syslog-ng] Bazsi's blog: Syslog-ng correllation

Balazs Scheidler bazsi at balabit.hu
Mon Oct 18 10:11:51 CEST 2010


On Sat, 2010-10-16 at 09:24 -0500, Martin Holste wrote:
> Ok, got it.  Now what about applying to other variables like this:
> 
> <value name="usracct.username">$(if "${usracct.username}" == "root"
> "root" "normal user")</value>
> 
> Or additional embedded conditionals (MySQL-style) like this:
> 
> <value name="usracct.username">$(if "${usracct.username}" == "root"
> $(if "${usracct.username}" == "joe" "admin" "normal user") "normal
> user")</value>

this is also possible of course.

-- 
Bazsi




More information about the syslog-ng mailing list