2008/3/20, Rainer Gerhards <[EMAIL PROTECTED]>: > Can you send me a handful of the logline to play with? Probably not this > week, but next... >
www.mysite.com 192.168.242.2 [20/Mar/2008:15:41:10 +0100] "GET /images/wm001.jpg HTTP/1.1" 304 - "http://www.mysite.com/webmail.htm" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.13) Gecko/20060607" i'm trying to use the regexp but with no success in this way: $template MsgFormat,"%msg%\n" $template ApacheRemoteCustom,"/var/log/apachelog/%msg:R:^\ [a-z,\.]*--end%_az.log" local6.info -?ApacheRemoteCustom;MsgFormat from the documentation: "the property replacer will return the part of the property text that matches the regular expression" which should be " www.mysite.com" but i get a file named _az.log -- mr _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog

