[syslog-ng] [Bug 174] New: It's unable to analyze entire string by match filter

[bugzilla at bugzilla.balabit.com]

https://bugzilla.balabit.com/show_bug.cgi?id=174

           Summary: It's unable to analyze entire string by match filter
           Product: syslog-ng
           Version: 3.2.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: olegon at olegon.ru
Type of the Report: ---
   Estimated Hours: 0.0


In my Gentoo Linux (compiled syslog-ng by source), I can't filter entire string, coming from external source.
My Cisco sends string "Session terminated .....", so I can't match it by match("Session terminated","MESSAGE") nor match("Session terminated","MSGHDR"),
because string splitted to PROGRAM and MESSAGE.
Old behaviour allowed me to analyze entire string by "MESSAGE", and "MSGONLY" allowed to analyze only message part of string, but nowadays all of this macro
points to only message part of string.


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.