[rsyslog-notify] Forum Thread: Re: Filtering messages containing specific characters CR LF - (Mode 'reply')

[noreply at adiscon.com]

User: johnwigley 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=26226#p26226

Message: 
----------
Hi,

Thanks for responding. I think I can now see where I was going wrong, so
I've tried a different configuration:

$EscapeControlCharactersOnReceive off

$template escapemsg,"%msg:::escape-cc%"

set $!escapedmsg = exec_template("escapemsg");

if $!escapedmsg contains '--->#012#015#012#015#012#012<---' then ~

Which if I understand it correctly, should take the inbound message escape
it to the octal escape codes, and then the final IF statement should look
at the escaped message and be able to filter on CR/LF?
Does this look right to you?

The specific LF/CR/LF/CR/LF/LF pattern is confirmed as the right pattern in
the log files if $EscapeControlCharactersOnReceive is ON.

This still isn't working for unknown reasons, but I wanted to check if my
logic appeared right?

Many thanks,