In message <[email protected]>,
Ludovic Hutin writes:
> I am back again, with another question, it's possible to set the
>context param to be case insensitive ?
> In my first log, username come in lowercase, and into other log
>they come with some uppercase
>
> context=USER_$13 with $13 in the first logs is "toto" and in the
>second log is "TOTO"
>
Blech.
> The result is simple, impossible to correlate the 2 entry :-(
The only thing that comes to mind immediately is to use a perlfunc for
the pattern and modify the case of the username. Something like:
ptype = perlfunc
patterm = sub { if ( $_[0] =~ /(your) pattern with (NAME) (here)/ ) { \
return ($1, lc($2), $3); } else { return 0;} }
context = name_$2
totally untested but you hopefully get the idea. It uses lc to
lowercase the variable holding the matched name and returns all the
pattern matches as a list that is assigned by sec to $1, $2, $3 so it
can be used in context and other expressions.
See the perlfunc section of the sec manpage and the perlre manpage for
perl.
--
-- rouilj
John Rouillard
===========================================================================
My employers don't acknowledge my existence much less my opinions.
------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
Simple-evcorr-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users
