[syslog-ng] patterndb will not accept a program containing a $

Evan Rempel erempel at uvic.ca
Mon Oct 20 00:47:29 CEST 2014

Technically speaking, any non-alphanumeric character will terminate the 
TAG field at the beginning
of the message. This is usually one of : [ or space as in the examples

program: this is the message
program[123]: this is the message
program this is the message

In practice though, syslog daemons will send TAGs that contain any 
character and the syslog-ng Agent for Windows
will forward the application name as it shows in the Windows Event Log. 
In some cases, this TAG will contain a $ character.

The patterndb-4.xsd definition disallows the $ character in the program 
pattern in pattern database files.

Can this restriction be removed to allow for the $ or is this a larger 
issue that I see?

Thanks again for all of the support.


More information about the syslog-ng mailing list