Hi, How can I remove a space from the begining of extracted field?
%msg:F:5% = " rsyslog" ... I would like to trim, and have "rsyslog". Is it possible to add a regex to %msg:F:5%? Flavio > From: [email protected] > To: [email protected] > Date: Tue, 30 Oct 2012 16:39:46 +0000 > Subject: Re: [rsyslog] Parsing msg > > Oops,hit return too quickly... > > >If I need more than one > > > field (Positions 3, 5 and 6), I just need to do something like > > > %msg:F:3:5:6%? > %msg:F:3%%msg:F:5%%msg:F:6% > > Rainer > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

