[rsyslog-notify] Forum Thread: V5.8.0 Help Templates - (Mode 'post')

[noreply at adiscon.com]

User: gouhier 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24209#p24209

Message: 
----------
I'm trying to configure a template to remove some text inside message.
Messages looks like this: "exename[....] file.c[...]: event: Message"

I want to remove "exename[....] file.c[...]: event:" and keep only the
"Message"
I try : 
[code:2pu3k8ez]$template
event_fmt,"%msg:R,ERE,0,FIELD:(event:.*)--end%\n"
:msg, contains, "event:"
/var/log/events.log;event_fmt[/code:2pu3k8ez]
In events.log I've got "event: Message" , "exename[....] file.c[...]: " has
been remove.

How to keep only the "Message" ?