[syslog-ng] Parsing multifield lines

Scheidler, Balázs balazs.scheidler at balabit.com
Mon Oct 19 19:46:51 CEST 2015


Well, regexp is probably the best option.

Or three patterns in db-parser

What kind of application is this?
On Oct 19, 2015 7:07 PM, "Giovanni Mancuso" <giovanni.mancuso at par-tec.it>
wrote:

> Hi,
> i'm writing a parser for lines having a repeated field on the same line
> eg(Recipient is repeated 3 times):
>
> ID: 123AABB456 Sender: user1 at example.com Recipient: user2 at example.com
> Recipient: user3 at example.com Recipient: user3 at example.com Status: Sent
>
> I would like to have a CUSTOM MACRO with all recipients.
>
> Is there a way to do this?
>
> Thanks
>
> --
>
>
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20151019/ce73b50a/attachment.htm 


More information about the syslog-ng mailing list