[syslog-ng] Problems with set() / condition() ?

Jorge Pereira jpereiran at gmail.com
Thu Jul 13 06:30:55 UTC 2017


I updated the config to use the padding()

    rewrite {
        set("$(* $(/ $R_MIN 5) 5)", value("min_slice"));
        set("$(padding ${min_slice} 2 0)", value("min5"));
        .............
    }

Thank you!

--
Jorge Pereira

On Thu, Jul 13, 2017 at 2:10 AM, Scheidler, Balázs <
balazs.scheidler at balabit.com> wrote:

> First of all the $(padding) template function might do exactly what you
> want.
>
> https://www.balabit.com/documents/syslog-ng-ose-
> latest-guides/en/syslog-ng-ose-guide-admin/html/
> reference-template-functions.html
>
> Also, in conditions you need to use $ to reference values,e.g. it should
> be condition($min_value ...)
>
> https://www.balabit.com/documents/syslog-ng-ose-
> latest-guides/en/syslog-ng-ose-guide-admin/html/filters-comparing.html
>
> And finally, there was a bug in numeric operators, which I remember to
> have fixed in 3.8:
>
> https://github.com/balabit/syslog-ng/commit/a84971503a74399dffa6b7bb27809d
> b2760526e3
>
> On Jul 13, 2017 05:27, "Jorge Pereira" <jpereiran at gmail.com> wrote:
>
> Hi List,
>
> I am trying to use the below set() + condition()
>
>     rewrite {
>         set("$(* $(/ $R_MIN 5) 5)", value("min_slice"));
>         set("0${min_slice}", value("min5"), condition("min_slice" <=
>  "9"));
>         set("${min_slice}",  value("min5"), condition("min_slice" >=
> "10"));
>
>         # final macro, e.g: www.mytest.com_20170417-1001PM-ng_lua.log.gz
>         set("${YEAR}${MONTH}${DAY}-${HOUR12}${min5}${AMPM}",
> value("logfmt_file"));
>         set("${YEAR}${MONTH}${DAY}/${HOUR12}${min5}${AMPM}",
> value("logfmt_dir"));
>     };
>
> But, does not work with R_MIN values around 1 ~ 9 then never execute the
> second set(... *condition("min_slice" <=  "9")*) statement. Has somebody
> idea?
>
> p.s: I am using the syslog-ng 3.7.3
>
> --
> Jorge Pereira
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?product=
> syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
>
> ____________________________________________________________
> __________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation: http://www.balabit.com/support/documentation/?
> product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20170713/a5ec1c98/attachment.html>


More information about the syslog-ng mailing list