[syslog-ng] [Bug 262] patterndb: Computed <values> are not expanded in context-id

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Thu Dec 19 12:02:47 CET 2013


https://bugzilla.balabit.com/show_bug.cgi?id=262





--- Comment #1 from Gergely Nagy <algernon at balabit.hu>  2013-12-19 12:02:47 ---
This happens because the actions are not applied to the message when a corellation context lookup failure happens. I'm not entirely sure how this works inside
syslog-ng... if the message gets reprocessed after a new context is started, then all is well. If not, that's a bug...

But until I figure that out, I can't properly fix this issue, because even though applying the rules earlier does seem to fix the problem, I have no idea what
other, possibly unwanted side-effects this change may have.


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list