[syslog-ng] min and max message count condition in correlation actions

[Evan Rempel]

so the syntax would be

<action condition="$(context-length) == $num">

wher $num is some macro from the pattern used to match a line.

Is that correct?



Sent from my ASUS Pad

Balazs Scheidler <bazsi77 at gmail.com> wrote:



as far as I remember, yes it did. It is a template function and not a macro.

it is called $(context-length)

----- Original message -----
>
> Did the ability to trigger on matches of the number of messages in the
> context every get merged into 3.4?
>
> I'm at a point where I could really use this functionality :-)
>
>
> https://lists.balabit.hu/pipermail/syslog-ng/2012-November/019691.html
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:
> http://www.balabit.com/wiki/syslog-ng-faq
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20130413/71c91619/attachment.htm