From d471e71adabdad4fba8b59c4017a1c5f1f111073 Mon Sep 17 00:00:00 2001
From: Rainer Gerhards
@@ -547,7 +547,11 @@ code), this can be done easily by:regex
-Compares the property against the provided regular
+ Compares the property against the provided POSIX regular
expression.
This filter will match when the message contains the string "ID-4711". Please note that the comparison is case-sensitive, so it would not match if "id-4711" would be contained in the message.
-Getting property-based filters right can sometimes be +
:msg, regex, "fatal .* error"
This filter uses a POSIX regular expression. It matches when the +string contains the words "fatal" and "error" with anything in between +(e.g. "fatal net error" and "fatal lib error" but not "fatal error" as +two spaces are required by the regular expression!).
Getting property-based filters right can sometimes be challenging. In order to help you do it with as minimal effort as possible, rsyslogd spits out debug information for all property-based filters during their evaluation. To enable this, run rsyslogd in -- cgit