From 12a433e000cab7ab1737df479aefbaeccab0dc09 Mon Sep 17 00:00:00 2001
From: Rainer Gerhards <rgerhards@adiscon.com>
Date: Mon, 11 Apr 2011 11:07:44 +0200
Subject: doc on using liblognorm-created properties was massing

---
 doc/property_replacer.html | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'doc/property_replacer.html')

diff --git a/doc/property_replacer.html b/doc/property_replacer.html
index cd357f67..57592fd1 100644
--- a/doc/property_replacer.html
+++ b/doc/property_replacer.html
@@ -201,6 +201,14 @@ range from 0 to 3 (for the four quater hours that are in each hour)</td>
 <td>The name of the current host as it knows itself (probably useful
 for filtering in a generic way)</td>
 </tr>
+<tr>
+<td><b>$!&lt;name&gt;</b></td>
+<td>This is the "bridge" to syslog message normalization (via
+<a href="mmnormalize.html">mmnormalize</a>): name is a name defined
+inside the normalization rule. It has the value selected by the rule
+or none if no rule with this field did match.
+</td>
+</tr>
 </tbody>
 </table>
 <p>Properties starting with a $-sign are so-called system
-- 
cgit