[rsyslog-notify] Forum Thread: Expression based filters with regex in version 8.4 - (Mode 'post')
noreply at adiscon.com
noreply at adiscon.com
Thu Oct 2 17:04:56 CEST 2014
User: johankellerman
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24973#p24973
Message:
----------
Hi
I'm trying to write expression based filter with regular expressions in
rsyslog 8.4 without success.
In my ruleset section I have tried something like this:
if ($msg regex
'\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}\w\s\w+\sRT_FLOW\s-.*') then {
action(type="omfile" Dynafile="RemoteFile")
}
I'm always getting error " run failed with error -2207 " when starting
rsyslog.
Should this work and if so could you please give a working example with
regex in a if ..then action.
Thanks!
/Johan
More information about the rsyslog-notify
mailing list