[syslog-ng] How to send tracebacks through syslog-ng?
Balazs Scheidler
bazsi at balabit.hu
Tue Sep 27 20:24:34 CEST 2011
On Sat, 2011-09-24 at 09:31 +0200, Jakub Jankowski wrote:
> On 2011-09-24, Luis Pugoy wrote:
>
> > rewrite r_rewrite_subst { subst("a*", "?", value("MESSAGE") type("pcre")
> > flags("utf8" "global")); };
> >
> > I thought that it would replace 0 or more occurrences of 'a' with a question
> > mark. However, when the input is 'a', the output becomes 'a?'. It just
> > appends a question mark at the end. 'aa' also becomes 'aa?'. What is weirder
> > still is that even if the input does not contain 'a', the question mark is
> > still appended. So '1' becomes '1?'.
>
> Well, does "1" match /a*/ ? :)
> It doesn't make any difference if that's /a*/, /b*/ or /.*/ - this kind of
> regexp matches everything, even an empty string.
Exactly. 'a*' matches the empty string and since you are performing
global replacements, that would be triggered for each character.
--
Bazsi
More information about the syslog-ng
mailing list