[syslog-ng] PatternDB: macros extraction from URLs

[Ioan Indreias]

Hello all,

Thanks a lot for the time and hints provided. We will try to figure
for each proposed solution how to implement it and come back with
further questions or with the final implementation.

Best regards,
Ioan

On Thu, Feb 17, 2011 at 7:23 PM, Matthew Hall <mhall at mhcomputing.net> wrote:
> On Thu, Feb 17, 2011 at 02:39:27PM +0100, Gergely Nagy wrote:
>> URL parameters could be extracted as a single string first, and fed to a
>> CSV-parser, that'd do the job of extracting the fields. You'd need to
>> combine patterndb with the CSV parser, though, and I'm not quite sure
>> how one would go about doing that, or if it's even possible.
>
> It's possible. Bazsi often recommends it to those of us with more complex messages to parse. ;-)
>
> Matthew.
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>