From imriz at co.zahav.net.il  Sun Dec 18 14:53:13 2005
From: imriz at co.zahav.net.il (Imri Zvik)
Date: Sun, 18 Dec 2005 15:53:13 +0200
Subject: [rsyslog] regex
Message-ID: <A6E1736261841F40B12286B0D04B194503E54EE7@IGMAIL.InetGold>

Hi,

I already posted this question in the "Community Forums" section of the website, but I thought that I might get luckier here, so I hope you will not find this post rude.

I am trying to figure out how the regex in rsyslogd works, and it seems like the docs are incomplete in that area. 

I have a string that looks like this one: 
Auth: XXX.XXX.XXX.XXX->XXX.XXX.XXX.XXX user="<USERNAME>" server="<SERVER>" port="<PORT<"
status="ok" 

Where: 
XXX.XXX.XXX.XXX == IP address 
<USERNAME> == Username 
<SERVER> == hostname 
<PORT> == port 

I am trying to catch the username, but I cannot seem to figure out the syntax of the regex template... 


Thank you in advance!

--
Imri Zvik
PGP (2.6.3ia) Public Key: http://mariska.inter.net.il/~imriz/imriz.pgp
?



From imriz at co.zahav.net.il  Sun Dec 18 14:53:13 2005
From: imriz at co.zahav.net.il (Imri Zvik)
Date: Sun, 18 Dec 2005 15:53:13 +0200
Subject: [rsyslog] regex
Message-ID: <A6E1736261841F40B12286B0D04B194503E54EE7@IGMAIL.InetGold>

Hi,

I already posted this question in the "Community Forums" section of the website, but I thought that I might get luckier here, so I hope you will not find this post rude.

I am trying to figure out how the regex in rsyslogd works, and it seems like the docs are incomplete in that area. 

I have a string that looks like this one: 
Auth: XXX.XXX.XXX.XXX->XXX.XXX.XXX.XXX user="<USERNAME>" server="<SERVER>" port="<PORT<"
status="ok" 

Where: 
XXX.XXX.XXX.XXX == IP address 
<USERNAME> == Username 
<SERVER> == hostname 
<PORT> == port 

I am trying to catch the username, but I cannot seem to figure out the syntax of the regex template... 


Thank you in advance!

--
Imri Zvik
PGP (2.6.3ia) Public Key: http://mariska.inter.net.il/~imriz/imriz.pgp
?



From imriz at co.zahav.net.il  Sun Dec 18 14:53:13 2005
From: imriz at co.zahav.net.il (Imri Zvik)
Date: Sun, 18 Dec 2005 15:53:13 +0200
Subject: [rsyslog] regex
Message-ID: <A6E1736261841F40B12286B0D04B194503E54EE7@IGMAIL.InetGold>

Hi,

I already posted this question in the "Community Forums" section of the website, but I thought that I might get luckier here, so I hope you will not find this post rude.

I am trying to figure out how the regex in rsyslogd works, and it seems like the docs are incomplete in that area. 

I have a string that looks like this one: 
Auth: XXX.XXX.XXX.XXX->XXX.XXX.XXX.XXX user="<USERNAME>" server="<SERVER>" port="<PORT<"
status="ok" 

Where: 
XXX.XXX.XXX.XXX == IP address 
<USERNAME> == Username 
<SERVER> == hostname 
<PORT> == port 

I am trying to catch the username, but I cannot seem to figure out the syntax of the regex template... 


Thank you in advance!

--
Imri Zvik
PGP (2.6.3ia) Public Key: http://mariska.inter.net.il/~imriz/imriz.pgp
?