[rsyslog] Arbitrary string replacements

[Rainer Gerhards]

can you elaborate a little of how you would like to use it? It still would be
a good idea to create its own feature request inside the bug tracker - I look
there if I have time to do new things, not so often in the mailing list
archive ;)

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com [mailto:rsyslog-
> bounces at lists.adiscon.com] On Behalf Of Ori Bani
> Sent: Friday, August 21, 2009 2:38 AM
> To: rsyslog at lists.adiscon.com
> Subject: [rsyslog] Arbitrary string replacements
> 
> Hi,
> 
> I understand that arbitrary replacements on log messages is not
> supported by rsyslog.  I found a thread that explains it here:
> 
> http://lists.adiscon.net/pipermail/rsyslog/2009-June/002317.html
> 
> I'd like to give my vote for adding this feature.  I have the same
> requirement (or similar) to the OP of that thread.  For now, I have to
> use syslog-ng, which I understand has recently already implemented
> this feature, or if I want to use rsyslog, I have to drop (discard)
> the messages that have information that I am not allowed to keep in my
> logs (that with IP addreses):
> 
> # This discards any message with an IP (ver. 4) address in it
> :msg, regex, "[0-9]\.[0-9]\.[0-9]\.[0-9]"              ~
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com