Quick Question. Which is more impactful to performance? set $!session = re_extract($msg, '^.*[\\^][0-9.-]+\\|[A-Z]+\\|[a-zA-Z0-9.-]+\\|[a-zA-Z0-9._-]+\\|[a-zA-Z0-9]*\\|([a-zA-Z0-9._-]*)[~]*[a-zA-Z0-9._-]*\\|.*', 0, 1, 'N/A');
or set $!session = field(field(field($msg, 94, 2), 124, 6), 126, 1); I'm going to do some testing, but if I can get a quick response here it could save me some time. I would expect the re_extract function to be, but I'm not familiar with how the code for field works so I can't make that assumption. Thanks! -- James _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
