[Lognorm] Question on special characters

[Lay, James]

Hey all!

 

So...I think I'm getting down to the bottom of something that I've had
an issue with.  Here's some tests:

 

Log contents to pass to normalizer, blick.txt:

Test one)

 

Rulebase file blick-rulebase:

prefix=

rule=: Test one)

 

normalizer -r blick-rulebase < blick.txt

this works, and returns nothing, since no normalizing was required (as I
understand it).

 

 

 

Now...if I make the below change to the blick-rulebase file:

 

prefix=

rule=: Test %-:word%)

 

normalizer -r blick-rulebase < blick.txt

[cee at 115 originalmsg=" Test one)" unparsed-data=" "]

 

Then it looks like something isn't working.

 

 

 

If I remove the ")" in both blick.txt and blick-rulebase to reflect:

Test one

 

prefix=

rule=: Test %-:word%

 

then it works:

normalizer -r blick-rulebase < blick.txt

[cee at 115 -="one"]

 

This seems to happen with matching %word% within parenthesis.  Is there
something I can do to check this on my end?  Thank you.

 

James

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.adiscon.net/pipermail/lognorm/attachments/20111124/992c21d0/attachment.htm>