[prev in list] [next in list] [prev in thread] [next in thread]
List: syslog-ng
Subject: [syslog-ng] Handling lists in syslog-ng: the in-list() filter
From: "Peter Czanik (pczanik)" <Peter.Czanik () oneidentity ! com>
Date: 2019-09-05 7:40:10
Message-ID: DM6PR19MB32123F2B11FE009F693CFC0F8BBB0 () DM6PR19MB3212 ! namprd19 ! prod ! outlook ! com
[Download RAW message or body]
Hi,
Recently, a number of quite complex configurations came up here and on gith=
ub issues. As it turned out, these configurations could be significantly si=
mplified using the in-list() filter, one of syslog-ng=92s lesser known feat=
ures. So, if you have a long list of filters in your configuration containi=
ng IP addresses, host names, and so on, you should consider using the in-li=
st() filter. Check out my latest blog about its advantages:
https://www.syslog-ng.com/community/b/blog/posts/handling-lists-in-syslog-n=
g-the-in-list-filter
Bye,
Peter Czanik (CzP) <peter.czanik@oneidentity.com>
Balabit (a OneIdentity company) / syslog-ng upstream
https://syslog-ng.com/community/
https://twitter.com/PCzanik
[Attachment #3 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} \
</style> </head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; \
color: rgb(0, 0, 0);"> Hi,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; \
color: rgb(0, 0, 0);"> <p style="box-sizing: border-box; margin: 0px 0px 1.25em; \
line-height: 1.6em; font-size: 14.3px; text-rendering: optimizelegibility; outline: \
0px; background: rgb(255, 255, 255); color: rgb(17, 23, 26); font-family: "Open \
Sans", "Segoe UI", "Helvetica Neue", "MS P \
Gothic", "Meiryo UI", "Meiryo UI Reg", \
"メイリオ Reg", "MS UI Gothic Reg", \
"Hiragino Kaku Gothic Reg", \
"ヒラギノ角ゴ Pro W3 Reg", \
"Microsoft YaHei", 微软雅黑, "Hiragino Sans \
GB", "Microsoft JhengHei", 微軟正黑體, \
"Malgun Gothic", Gulim, Tahoma, "Arial Unicode", sans-serif; \
orphans: 2; widows: 2"> <br>
</p>
<p style="box-sizing: border-box; margin: 0px 0px 1.25em; line-height: 1.6em; \
font-size: 14.3px; text-rendering: optimizelegibility; outline: 0px; background: \
rgb(255, 255, 255); color: rgb(17, 23, 26); font-family: "Open Sans", \
"Segoe UI", "Helvetica Neue", "MS P Gothic", \
"Meiryo UI", "Meiryo UI Reg", \
"メイリオ Reg", "MS UI Gothic Reg", \
"Hiragino Kaku Gothic Reg", \
"ヒラギノ角ゴ Pro W3 Reg", \
"Microsoft YaHei", 微软雅黑, "Hiragino Sans \
GB", "Microsoft JhengHei", 微軟正黑體, \
"Malgun Gothic", Gulim, Tahoma, "Arial Unicode", sans-serif; \
orphans: 2; widows: 2"> Recently, a number of quite complex configurations came up \
here and on github issues. As it turned out, these configurations could be \
significantly simplified using the in-list() filter, one of syslog-ng’s lesser known \
features. So, if you have a long list of filters in your configuration \
containing IP addresses, host names, and so on, you should consider using the \
in-list() filter. Check out my latest blog about its advantages:<br> </p>
<a href="https://www.syslog-ng.com/community/b/blog/posts/handling-lists-in-syslog-ng- \
the-in-list-filter">https://www.syslog-ng.com/community/b/blog/posts/handling-lists-in-syslog-ng-the-in-list-filter</a><br>
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; \
color: rgb(0, 0, 0);"> Bye,<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; \
color: rgb(0, 0, 0);"> <br>
</div>
<div id="Signature">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; \
color:rgb(0,0,0)"> <div>
<div>
<div dir="ltr">Peter Czanik (CzP) <peter.czanik@oneidentity.com><br>
Balabit (a OneIdentity company) / syslog-ng upstream<br>
<a href="https://syslog-ng.com/community/" \
target="_blank">https://syslog-ng.com/<wbr>community/</a><br> <a \
href="https://twitter.com/PCzanik" \
target="_blank">https://twitter.com/PCzanik</a></div> </div>
</div>
<br>
</div>
</div>
</body>
</html>
[Attachment #4 (unknown)]
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic