Re: [syslog-ng] QSTRING with @

On Thu, Sep 30, 2010 at 04:29:25PM +0200, Peter Czanik wrote:
> Thanks. Any idea how could this be solved here:
>
> <pattern>(czanik@192.168.2.52) [INFO] Logout.</pattern>
>
> "czanik" is a username here, but that might use other characters, not
> just letters and numbers.
>
> Well, QSTRING or ESTRING does not work here, but I found the necessary
> information in "man useradd":
> "
> The account name must begin with an alphabetic character and
> the rest
> of the string should be from the POSIX portable character class
> ([A-Za-
> z_][A-Za-z0-9_-.]*[A-Za-z0-9_-.$]).
> "
> So it can be solved with: @STRING::_-.$@

I have also seen '+' and '\' used on UNIX PCs with Windows AD auth
configured, to specify the domain.

> > It would be good if this could be fixed somehow.
> Forwarded to the documentation team.
Awesome! Thank you for doing that.

> Bye,
> CzP

Regards,
Matthew.
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.campin.net/syslog-ng/faq.html

• This message: [ Message body ]
• Next message: Martin Holste: "Re: [syslog-ng] Bazsi's blog: Syslog-ng correllation"
• Previous message: Balazs Scheidler: "Re: [syslog-ng] pure-ftpd patterns"
• In reply to: Peter Czanik: "Re: [syslog-ng] QSTRING with @"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]