two thigns have been giving me grief 1. when doing filtering in rsyslog, it would be _very_ nice if you would accept single quotes everywhere you accept double quotes. currently rsyslog just dies (with no useful error message) if you quote a string like 'this' instead of "this"
2. as I am dealing with garbage logs from different vendors I am running into many special case situations where I can detect the breakage and define how to fix it, but it gets very cumbersom to have a dozen different sets of formats (one for writing locally, one for forwarding), and then for each detected condition list all of the actions (with the particular formats for that condition) it would be _very_ nice if there was some way to fix the internal variables so that I could have the conditional and then code to fix up the hostname, syslogtag, message, etc to then fall through to one set of formats and actions. David Lang _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
