[syslog-ng] [Bug 262] New: patterndb: Computed <values> are not expanded in context-id

[bugzilla at bugzilla.balabit.com]

https://bugzilla.balabit.com/show_bug.cgi?id=262

           Summary: patterndb: Computed <values> are not expanded in
                    context-id
           Product: syslog-ng
           Version: 3.5.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: bugzilla.balabit at faxm0dem.org
Type of the Report: ---
   Estimated Hours: 0.0


Created an attachment (id=87)
 --> (https://bugzilla.balabit.com/attachment.cgi?id=87)
patterndb ruleset

It seems the values are not being expanded as expected in the context-id:
--
pdbtool test /tmp/test.pdb -vd
Module loaded and initialized successfully; module='syslogformat'
Module loaded and initialized successfully; module='basicfuncs'
Testing message program='' message='the big "brown" fox'
patterndb rule matches; rule_id='A'
Advancing patterndb current time because of an incoming message; utc='-1'
Correllation context lookup failure, starting a new context; rule='A', context='brown.', context_timeout='0', context_expiration='-1'
 Match name='.classifier.rule_id', value='A', expected='A'
 Match name='matched.var', value='brown', expected='brown'
--

as you can see, context-id='brown.' instead of 'brown.brown' as expected by expanding '${matched.var}.${computed.var}'


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.