[syslog-ng] quote characters (or other specials) in patterens?

Nick linickx at gmail.com
Thu Dec 19 15:57:03 CET 2013


Hello,

doh! copy/paste added extra carriage returns.

Have a look now (https://gist.github.com/linickx/8038784)

working.xml should validate with no errors.

[nick at localhost ~]$ pdbtool test --validate working.xml
nick.xml validates
Testing message program='bluecoat' message='10:57:56 43 10.8.26.200 -
- - OBSERVED "Web Ads/Analytics"
http://googleads.g.doubleclick.net/mads/  200 TCP_CLIENT_REFRESH GET
image/png http pagead2.googlesyndication.com 80
/pagead/images/nessie_icon_chevron_white.png - png "Mozilla/5.0
(Linux; U; Android 4.0.4; en-gb; P76a(K3G5) Build/IMM76D)
AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30
(Mobile; afma-sdk-a-v6.2.1)" 10.8.24.5 724 1277 -'
[nick at localhost ~]$

I also removed the line breaks from the broken examples.

cheers,
Nick

On 19 December 2013 14:29, Fabien Wernli <wernli at in2p3.fr> wrote:
> Hi Nick,
>
> Could you update your gist to something that pdbtool parses? I think you got
> your copy'n'paste wrong
>
> cheers
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>



-- 
Shameless plug for google Juice: http://www.linickx.com


More information about the syslog-ng mailing list