[syslog-ng] Pattern DB Parser "Default Values"

David Hauck davidh at netacquire.com
Fri Apr 18 17:40:47 CEST 2014


Hi,

I was wondering if there was a way to specify default values for pattern DB parsers that include a value, but where the parsed value is <null>[/empty]?

In particular if I have something like the following:

          <pattern>test message; field1=@ESTRING:field1: @field2=@ESTRING:field2: @field3=@ESTRING:: @field4=@ESTRING:field4: @</pattern>

I'd like to be able to do something like either, 1:

          <pattern>test message; field1=@ESTRING:field1<foo>: @field2=@ESTRING:field2<bar>: @field3=@ESTRING:: @field4=@ESTRING:field4<beef>: @</pattern>

Or 2:

          <pattern>test message; field1=@ESTRING:field1: @field2=@ESTRING:field2: @field3=@ESTRING:: @field4=@ESTRING:field4: @</pattern>
        <values>
          <value name="field1.default">foo</value>
          <value name="field2.default">bar</value>
          <value name="field4.default">beef</value>

Just curious...

Thanks,
-David


More information about the syslog-ng mailing list