[syslog-ng] patterndb will not accept a program containing a $

[Tusa Viktor]

Hi!

I think we can. But I can't see in the xsd file where we diallow the $
character. patternType is an xs:string which allows every legal character,
and I even managed to validate a patterndb file with $ in it's program name
with xmllint. Can you please send me an example of non-validating xml file?

Best Regards,
Viktor

On Sat, Oct 25, 2014 at 10:37 PM, Balazs Scheidler <bazsi77 at gmail.com>
wrote:

> I think the restriction should be removed. Viktor, do you agree?
> On Oct 20, 2014 12:47 AM, "Evan Rempel" <erempel at uvic.ca> wrote:
>
>> Technically speaking, any non-alphanumeric character will terminate the
>> TAG field at the beginning
>> of the message. This is usually one of : [ or space as in the examples
>>
>> program: this is the message
>> program[123]: this is the message
>> program this is the message
>>
>>
>> In practice though, syslog daemons will send TAGs that contain any
>> character and the syslog-ng Agent for Windows
>> will forward the application name as it shows in the Windows Event Log.
>> In some cases, this TAG will contain a $ character.
>>
>> The patterndb-4.xsd definition disallows the $ character in the program
>> pattern in pattern database files.
>>
>> Can this restriction be removed to allow for the $ or is this a larger
>> issue that I see?
>>
>> Thanks again for all of the support.
>>
>> Evan.
>>
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:
>> http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20141028/46024bf8/attachment.htm