Hi. I tried the following rule to match any occurrence of 'sda' but it did not work:
:msg, regex, ".*sda.*" /var/log/properties/sd_regex Replacing the regex with simply "sda" matches. Do I not need to take the entire message into account? Peter _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

