[syslog-ng] [Bug 149] patterndb action message does not do variable substitution

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Mon Nov 28 20:53:25 CET 2011


https://bugzilla.balabit.com/show_bug.cgi?id=149





--- Comment #2 from Evan Rempel <erempel at uvic.ca>  2011-11-28 20:53:25 ---
Using the braces does not change the way that it works.

        <actions>
          <action context-scope="program" trigger="match">
             <rate>1/60</rate>
             <message>
               <values>
                 <value name="MESSAGE">message id ${.classifier.rule_id}</value>
                 <value name="PROGRAM">patterndb</value>
               </values>
             </message>
          </action>
        </actions>


generates the line

2011-11-28T11:52:29-08:00 int at catamount.comp.uvic.ca kern.emerg patterndb: message id 
2011-11-28T11:52:29-08:00 int at catamount.comp.uvic.ca kern.emerg patterndb: message id 


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list