summaryrefslogtreecommitdiffstats
path: root/doc/property_replacer.html
diff options
context:
space:
mode:
authorRainer Gerhards <rgerhards@adiscon.com>2012-04-27 09:55:11 +0200
committerRainer Gerhards <rgerhards@adiscon.com>2012-04-27 09:55:11 +0200
commit9801893b29ea47ade4b915e3eac79bcdc5ce74aa (patch)
tree305e277ab9faa5941d151eae68f5d04fc41e9129 /doc/property_replacer.html
parentfb5cd633e6f4852841354fcf55c971063cc6a871 (diff)
parent9c76723c5b048afe4009f0528a6201741fec234a (diff)
downloadrsyslog-9801893b29ea47ade4b915e3eac79bcdc5ce74aa.tar.gz
rsyslog-9801893b29ea47ade4b915e3eac79bcdc5ce74aa.tar.xz
rsyslog-9801893b29ea47ade4b915e3eac79bcdc5ce74aa.zip
Merge branch 'v5-stable-field-substring' into v5-beta
Diffstat (limited to 'doc/property_replacer.html')
-rw-r--r--doc/property_replacer.html9
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/property_replacer.html b/doc/property_replacer.html
index f0153f2a..5dbdc4c6 100644
--- a/doc/property_replacer.html
+++ b/doc/property_replacer.html
@@ -274,6 +274,15 @@ fields in the property is requested. The field number must be placed in
the "ToChar" parameter. An example where the 3rd field (delimited by
TAB) from the msg property is extracted is as follows: "%msg:F:3%". The
same example with semicolon as delimiter is "%msg:F,59:3%".</p>
+<p>The use of fields does not permit to select substrings, what is rather
+unfortunate. To solve this issue, starting with 6.3.9, fromPos and toPos
+can be specified for strings as well. However, the syntax is quite ugly, but
+it was the only way to integrate this functonality into the already-existing
+system. To do so, use ",fromPos" and ",toPos" during field extraction.
+Let's assume you want to extract the substring from position 5 to 9 in the previous
+example. Then, the syntax is as follows: "%msg:F,59,5:3,9%". As you can see,
+"F,59" means field-mode, with semicolon delimiter and ",5" means starting
+at position 5. Then "3,9" means field 3 and string extraction to position 9.
<p>Please note that the special characters "F" and "R" are
case-sensitive. Only upper case works, lower case will return an error.
There are no white spaces permitted inside the sequence (that will lead