[rsyslog] variables in filters

[david at lang.hm]

no,it not possible to set a variable that then gets used in the config 
file.

David Lang

On Thu, 9 Dec 2010, Bernard Fay wrote:

> Hi,
>
> Is-it possible to use variable in rsyslog?
>
> We have a rsyslog server that collects events from windows servers.  Some
> events from windows are about tmp files that we don't need in our rsyslog
> server.  For one tmp file there is many events but the name of the file is
> not shown in all events.  The only way I know to related all events to one
> tmp file is by the handle ID.  I can filter the event for tmp file base on a
> regex for the file name.  In rsyslog, does it have a way to extract a string
> from a rawmsg and assign it to a variable to be used by another filter to
> filter the related events to this tmp file?
>
> I hope I am clear enough.
>
> By the way, my version of rsyslog is 4.2.0.
>
> Thanks,
> Bernard
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
>