[syslog-ng] Pattern DB Parser "Default Values"
David Hauck
davidh at netacquire.com
Fri Apr 18 17:40:47 CEST 2014
Hi,
I was wondering if there was a way to specify default values for pattern DB parsers that include a value, but where the parsed value is <null>[/empty]?
In particular if I have something like the following:
<pattern>test message; field1=@ESTRING:field1: @field2=@ESTRING:field2: @field3=@ESTRING:: @field4=@ESTRING:field4: @</pattern>
I'd like to be able to do something like either, 1:
<pattern>test message; field1=@ESTRING:field1<foo>: @field2=@ESTRING:field2<bar>: @field3=@ESTRING:: @field4=@ESTRING:field4<beef>: @</pattern>
Or 2:
<pattern>test message; field1=@ESTRING:field1: @field2=@ESTRING:field2: @field3=@ESTRING:: @field4=@ESTRING:field4: @</pattern>
<values>
<value name="field1.default">foo</value>
<value name="field2.default">bar</value>
<value name="field4.default">beef</value>
Just curious...
Thanks,
-David
More information about the syslog-ng
mailing list