[rsyslog-notify] Forum Thread: Expression based filters with regex in version 8.4 - (Mode 'post')

noreply at adiscon.com noreply at adiscon.com
Thu Oct 2 17:04:56 CEST 2014


User: johankellerman 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24973#p24973

Message: 
----------
Hi

I'm trying to write expression based filter with regular expressions in
rsyslog 8.4 without success.

In my ruleset section I have tried something like this:

if ($msg regex
'\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}\w\s\w+\sRT_FLOW\s-.*') then {
	action(type="omfile" Dynafile="RemoteFile")
}

I'm always getting error " run failed with error -2207 " when starting
rsyslog. 
Should this work and if so could you please give a working example with
regex in a if ..then action.

Thanks!

/Johan


More information about the rsyslog-notify mailing list