[syslog-ng] patternize and IPv6 hosts
Peter Gyongyosi
gyp at balabit.hu
Wed Mar 2 12:38:30 CET 2011
On 03/01/2011 07:36 PM, Balazs Scheidler wrote:
>
>> This patch I've just pushed to my repo at
>> git://git.balabit.hu/gyp/syslog-ng-3.2.git does just that:
>>
>> commit 31cedfa84839459046a5b0acd5fb42339e1da807
>> Author: Peter Gyongyosi<gyp at balabit.hu>
>> Date: Fri Feb 25 11:31:03 2011 +0100
>>
>> pdbtool patternize: added the --no-parse option
>>
>> This allows for the manual processing of the to-be-patternized log
>> messages
>> instead of requiring it to be in a parsable RFC-compliant log format.
>>
>> After this, you can do things like
>>
>> cat logfile.log | cut -d' ' -f4- | pdbtool patternize --no-parse -f -
>>
>> It's still based on 3.2, but I guess it should apply trivially on 3.3 as
>> well. If not, let me know and I'll open my 3.3 branch and add it there,
>> too. (And if you're not doing it already, you should really try
>> patternize with 3.3, as since a couple of days ago, it contains Balint
>> Kovacs's patch which allows you to specify word delimiters instead of
>> using only the hardcoded space char for this purpose, which can
>> *drastically* improve the quality of your patterns.)
>>
> Can you please paste a Signed-off-by line in an email reply (or perhaps
> rebase the patch with the signed-off-by line added) please?
>
Hi,
I've created my 3.3 branch at git://git.balabit.hu/gyp/syslog-ng-3.3.git
and added the patch there with the Signed-off line:
commit 8e2d2608f7a50c52f9a26315cdf639d173c69f15
Author: Peter Gyongyosi<gyp at balabit.hu>
Date: Wed Mar 2 10:38:01 2011 +0100
pdbtool patternize: added the --no-parse option
This allows for the manual processing of the to-be-patternized log messages
instead of requiring it to be in a parsable RFC-compliant log format.
Signed-off-by: Peter Gyongyosi<gyp at balabit.hu>
greets,
Peter
More information about the syslog-ng
mailing list