Thanks very much, David, prifilt looks very promising Ede
Am Wed, 22 Jun 2022 04:20:48 -0700 (PDT) schrieb David Lang <da...@lang.hm>: > look at prifilt() > https://www.rsyslog.com/doc/master/rainerscript/functions/rs-prifilt.html > > this gives you an easy way to do traditional filtering (*.warn for > warn or worse) with the if...then syntax > > string compares are string compares, so you can't do them directly, > you could however set $.foo variables for each level to become a > number > > i.e. > > set $.warning = 4; > if *syslogseverity <= $.warning then { > > David Lang > > On Wed, 22 Jun 2022, Ede Wolf via rsyslog wrote: > > > Hello again, > > > > last question for today. Is there a way to filter everything from > > warn and up using the text names, besides using an "or" logic to > > list all of them individually? > > Just to give the idea, of course you cannot greater compare strings: > > > > if ($syslogseverity-text >= "warning") then { > > > > But maybe there is an alternative syntax, as it does work using the > > number values: > > > > if ($syslogseverity <= 4) then { > > > > But using the old school names would be more intuitive. Adding all > > five of them individually is not really a big deal, but maybe there > > is a more elegant and versatile option. > > > > Thanks > > > > Ede > > _______________________________________________ > > rsyslog mailing list > > https://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT > > POST if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
