[syslog-ng] patterndb and context - access fields from initial message

[Tusa Viktor]

Hi!

I think, the negative notation could solve this situation eg.: $MACRO at -N
would mean the first Nth message in the context and not the last Nth. I
checked the code and it is not terrible hard to implement. I can make a PoC
for you in the next week, if you would like to test it.

Regards,
Viktor


On Tue, Jul 8, 2014 at 11:54 AM, Fabien Wernli <wernli at in2p3.fr> wrote:

> Hi,
>
> I'm AFK for a while but did you check out the `grep` template function?
>
> Cheers
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20140708/7bda4971/attachment.htm