diff options
author | Rainer Gerhards <rgerhards@adiscon.com> | 2005-09-20 12:58:45 +0000 |
---|---|---|
committer | Rainer Gerhards <rgerhards@adiscon.com> | 2005-09-20 12:58:45 +0000 |
commit | 800d6e5b76a799e4e03961799cb7c8b0ea86c133 (patch) | |
tree | 964263c91ee540fdc8f7b2152e454e96fb762d29 /doc/property_replacer.html | |
parent | a9dcb28580511f0c15fa8eea2ec5c14eb186082e (diff) | |
download | rsyslog-800d6e5b76a799e4e03961799cb7c8b0ea86c133.tar.gz rsyslog-800d6e5b76a799e4e03961799cb7c8b0ea86c133.tar.bz2 rsyslog-800d6e5b76a799e4e03961799cb7c8b0ea86c133.zip |
updated doc to match 1.10 feature set
Diffstat (limited to 'doc/property_replacer.html')
-rw-r--r-- | doc/property_replacer.html | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/doc/property_replacer.html b/doc/property_replacer.html index 89d88c8d..6bc00fe1 100644 --- a/doc/property_replacer.html +++ b/doc/property_replacer.html @@ -47,7 +47,16 @@ the string that should be copied. Offset counting starts at 1, so if you need to obtain the first 2 characters of the message text, you can use this syntax:
"%msg:1:2%". If you do not whish to specify from and to, but you want to specify
options, you still need to include the colons. For example, if you would like to
-convert the full message text to lower case, use "%msg:::lowercase%".<br>
+convert the full message text to lower case, use "%msg:::lowercase%".<p>
+There is also support for <b>regular expressions</b>. To use them, you need to
+place a "R" into FromChar. This tells rsyslog that a regular expression instead
+of position-based extraction is desired. The actual regular expression must then
+be provided in toChar. The regular expression <b>must</b> be followed by the
+string "--end". It denotes the end of the regular expression and will not become
+part of it. If you are using regular expressions, the property replacer will
+return the part of the property text that matches the regular expression. An
+example for a property replacer sequence with a regular expression is: "%msg:R:.*Sev:.
+\(.*\) \[.*--end%"<br>
<br>
<h2>Property Options</h2>
<b><code>property options</code></b> are case-insensitive. Currently, the following options
|