[syslog-ng] can kv-parser options be from macros

[Balazs Scheidler]

 Not at the moment. But if you can explain what you'd like to accomplish I
can help. Is it LEEF maybe?

Balázs

On Fri, Nov 1, 2024, 18:02 Evan Rempel <erempel at uvic.ca> wrote:

> Does anyone know if I can use the enriching data to set macros  that can
> then be used as kv-parser options.
> These values might change on a message by message basis.
> For example:
>
> parser p_kv {
>     kv-parser (
>         prefix("$kv_prefix")
>         value-separator("$kv_vseparator")
>         pair-separator("$kv_pseparator")
>     );
> };
>
> --
> Evan
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20241102/96f03d4d/attachment.htm>