[syslog-ng] Minimum Syslog Message Length

[Balazs Scheidler]

On Thu, 2011-12-15 at 08:53 -0500, vincent at ragosta.net wrote:
> Is it possible to specify a restriction on the minimum length of a
> syslog message?  We often receive small, malformed messages that we do
> not want to transmit.

Right now it isn't. Maybe if you could match against them with a regexp,
though that could be expensive. IIRC PCRE has repetition count limits,
so you could do something like:

To match for maximum 16 characters.

filter f_malformed { match('.{,16}'); };

I'm not sure about the syntax though.

-- 
Bazsi