[syslog-ng] In-list problem
László Pál
vlad at vlad.hu
Fri Oct 4 13:48:49 UTC 2019
So,
It seems in-list is uses a simple string match.
I think for most of the usecases it would be great if matching can be configured for in-list (like glob, posix etc). Do you think it worth a feature request? :)
Thx
L:
> On 2019. Oct 3., at 18:49, László Pál <vlad at vlad.hu> wrote:
>
> Hi,
>
> I have a strange (at least to me :) issue. In my new system I’m heavily using in-list in my filters to tell which logs should be forwarded.
>
> In my lists it is sometimes hostnames, sometimes programs sometimes source IP, but it is very erratic. What I think because I’m using it wrong.
>
> What exact pattern matching is used in this feature? Is this posix regex or simply glob?
>
> I have lines like this in my files
> 1.2..3.4
> Host.domain.com
> ssh.*
> host.*
>
> The problem is, sometimes it is matches sometimes not….
>
> So, my question is how to use it to work properly?
>
> Unfortunately the admin guide is quite poor around this subject
>
> Thanks
> Laszlo
>
More information about the syslog-ng
mailing list