[syslog-ng] In-list problem

László Pál vlad at vlad.hu
Fri Oct 4 13:48:49 UTC 2019


So,

It seems in-list is uses a simple string match.

I think for most of the usecases it would be great if matching can be configured for in-list (like glob, posix etc). Do you think it worth a feature request? :)

Thx
L:


> On 2019. Oct 3., at 18:49, László Pál <vlad at vlad.hu> wrote:
> 
> Hi,
> 
> I have a strange (at least to me :) issue. In my new system I’m heavily using in-list in my filters to tell which logs should be forwarded.
> 
> In my lists it is sometimes hostnames, sometimes programs sometimes source IP, but it is very erratic. What I think because I’m using it wrong.
> 
> What exact pattern matching is used in this feature? Is this posix regex or simply glob?
> 
> I have lines like this in my files
> 1.2..3.4
> Host.domain.com
> ssh.*
> host.*
> 
> The problem is, sometimes it is matches sometimes not….
> 
> So, my question is how to use it to work properly?
> 
> Unfortunately the admin guide is quite poor around this subject
> 
> Thanks
> Laszlo
> 



More information about the syslog-ng mailing list