[syslog-ng] Glob character ranges

[Evan Rempel]

In this particular case can you use

"* [0123456789]"

for your match. Gets around the performance concern of regex

Evan.
________________________________________
From: syslog-ng-bounces at lists.balabit.hu [syslog-ng-bounces at lists.balabit.hu] On Behalf Of T. A. Smooth [catdaaaady at gmail.com]
Sent: Saturday, July 21, 2012 12:43 PM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] Glob character ranges

I found the part of the doc.
http://www.balabit.com/sites/default/files/documents/syslog-ng-ose-3.3-guides/syslog-ng-ose-v3.3-guide-admin-en.html/index.html-single.html#reference_regexp_glob

I see this in docs 3.1 and up. Don't see it in 3.0 though. I am testing on 3.2.5.   Has anyone gotten glob character ranges to work ? :-) I may go regex in the end. But I do have a concern about performance. So I want to be sure glob ranges are broken/unsupported or something else before I move on.
glob

Description: Use glob patterns (that is, wildcards and character ranges) without regular expression support. The advantage of glob patterns to regular expressions is that globs can be processed much faster. For details on glob patterns, see the glob manual page (man glob).




On Fri, Jul 20, 2012 at 11:20 PM, Gergely Nagy <algernon at balabit.hu<mailto:algernon at balabit.hu>> wrote:
"T. A. Smooth" <catdaaaady at gmail.com<mailto:catdaaaady at gmail.com>> writes:

> Doing a "man glob" shows it can do ranges. And I thought i read some
> Syslog-ng doc that said it could do it too?

glob does support ranges, but glib's glob[1] sadly does not. If the
syslog-ng docs say somewhere it does, that is unfortunately a
documentation bug.

 [1]: http://developer.gnome.org/glib/unstable/glib-Glob-style-pattern-matching.html#glib-Glob-style-pattern-matching.description

As an alternative, you can use regexps - a bit costier, but for a simple
regex, hopefully not by much.

On another hand, not supporting ranges is suprising, and in other parts
of the code, syslog-ng already uses plain old glob().. it might be worth
considering switching the matching code over too, at some point.

--
|8]

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq