Hi Mariusz,
Thanks for the follow-up.
Would you handle this with regex, or is there some other way
Brian
On 5/11/22 11:55 PM, Mariusz Kruk via rsyslog wrote:
If you're talking about the field() function, there's only a single
field extraction and there's no negative addressing (which is a bit
sad sometimes but I can do my walkarounds ;-)).
On 12.05.2022 00:38, Brian C. Hill via rsyslog wrote:
Hello,
I've scoured the documentation, but I don't see a way with
'field.number' to specify a range of fields, particularly the ability
to specify the limit as last item.
For example, to include all fields from number 4 and all following
fields, maybe the syntax would be:
field.number="4:0" or maybe "4:-1".
That doesn't work, of course.
Am I simply not finding the documentation for the field.*-related
syntax to make that work, or are the regex.* handlers the only way to
do that?
Processing with the field.* handlers would be faster.
Thanks for any help.
Brian
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT
POST if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
