Re: [rsyslog] Use part of incoming syslog message in an output file name?

2013-01-28 Thread Rainer Gerhards
> -Original Message- > From: rsyslog-boun...@lists.adiscon.com [mailto:rsyslog- > boun...@lists.adiscon.com] On Behalf Of Ben Bradley > Sent: Monday, January 28, 2013 1:39 PM > To: rsyslog@lists.adiscon.com > Subject: Re: [rsyslog] Use part of incoming syslog message

Re: [rsyslog] Use part of incoming syslog message in an output file name?

2013-01-28 Thread Ben Bradley
On Mon, 28 Jan 2013 11:33:11 + Rainer Gerhards wrote: > $template ApacheAccessLogFile, > "/var/log/httpd/%msg:R,ERE,1,BLANK:([a-z0-9\-\.]+) [0-9]+$--end%_access.log" > Amazing! Thanks so much! --- start of long story --- I have Apache logging to /bin/logger and then have rsyslog generate

Re: [rsyslog] Use part of incoming syslog message in an output file name?

2013-01-28 Thread Rainer Gerhards
28, 2013 12:30 PM > To: rsyslog@lists.adiscon.com > Subject: Re: [rsyslog] Use part of incoming syslog message in an output file > name? > > On Mon, 28 Jan 2013 10:44:31 + > Rainer Gerhards wrote: > > > http://www.rsyslog.com/doc/property_replacer.html > >

Re: [rsyslog] Use part of incoming syslog message in an output file name?

2013-01-28 Thread Ben Bradley
On Mon, 28 Jan 2013 10:44:31 + Rainer Gerhards wrote: > http://www.rsyslog.com/doc/property_replacer.html > That's excellent. I've got my regular expression and tested it using the regex tester... $template tpl, "%msg:R,ERE,1,BLANK:([a-z0-9\-\.]+) [0-9]+$--end%\n" How do I modify this bit

Re: [rsyslog] Use part of incoming syslog message in an output file name?

2013-01-28 Thread Rainer Gerhards
[rsyslog] Use part of incoming syslog message in an output file > name? > > Hi everyone > > Is there a way to isolate/specify a word/string from an incoming syslog > message and use that in an output file name template? > > Is there full regex and pattern matching support in

[rsyslog] Use part of incoming syslog message in an output file name?

2013-01-28 Thread Ben Bradley
Hi everyone Is there a way to isolate/specify a word/string from an incoming syslog message and use that in an output file name template? Is there full regex and pattern matching support in rsyslog filters/templates? Cheers, B ___ rsyslog mailing lis