[rsyslog] filtering by message size

[Rainer Gerhards]

Let me see what I can do - it looks so trivial that I tend to think I
have overlooked some subtlety ;)

Rainer 

> -----Original Message-----
> From: rsyslog-bounces at lists.adiscon.com 
> [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of david at lang.hm
> Sent: Wednesday, March 04, 2009 8:06 AM
> To: rsyslog-users
> Subject: Re: [rsyslog] filtering by message size
> 
> On Wed, 4 Mar 2009, Rainer Gerhards wrote:
> 
> > Oh, that's an interesting use case. It is not yet possible. 
> I think we
> > can implement (fairly simple) the size for a field (via the property
> > replacer). However, that does not help you with the 
> resulting size of a
> > template string. I probably also need to check the supporting
> > infrastructure for "greater than" comparisons...
> >
> > Would that help?
> 
> yes, I can set the value to something conservative to account for the 
> variable-length fields.
> 
> David Lang
> 
> > Rainer
> >
> >> -----Original Message-----
> >> From: rsyslog-bounces at lists.adiscon.com
> >> [mailto:rsyslog-bounces at lists.adiscon.com] On Behalf Of 
> david at lang.hm
> >> Sent: Wednesday, March 04, 2009 12:54 AM
> >> To: rsyslog-users
> >> Subject: [rsyslog] filtering by message size
> >>
> >> is it possible to filter by message size?
> >>
> >> I'm looking at a situation where I would like to send the
> >> message via UDP
> >> if it's below a given size and by TCP if it's larger.
> >>
> >> David Lang
> >> _______________________________________________
> >> rsyslog mailing list
> >> http://lists.adiscon.net/mailman/listinfo/rsyslog
> >> http://www.rsyslog.com
> >>
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com
> >
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
>