From 98d4437d0e5950118e5dd09fda0bf45e85512bfd Mon Sep 17 00:00:00 2001 From: Rainer Gerhards Date: Wed, 14 Nov 2012 11:07:35 +0100 Subject: doc: describe leading space problem with "startswith" comparison --- ChangeLog | 1 + doc/rsyslog_conf_filter.html | 11 ++++++++--- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index d794bdb2..cf633a6d 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,6 @@ ---------------------------------------------------------------------------- Version 7.2.2 [v7-stable] 2012-10-?? +- doc improvements - enabled to build without libuuid, at loss of uuid functionality this enables smoother builds on older systems that do not support libuuid. Loss of functionality should usually not matter too much as diff --git a/doc/rsyslog_conf_filter.html b/doc/rsyslog_conf_filter.html index 3efa3967..a795193f 100644 --- a/doc/rsyslog_conf_filter.html +++ b/doc/rsyslog_conf_filter.html @@ -197,9 +197,14 @@ of the property value. For example, if you search for "val" with

it will be a match if msg contains "values are in this message" but it won't match if the msg contains "There are values in this message" (in the later case, contains would match). Please note -that "startswith" is by far faster than regular expressions. So even -once they are implemented, it can make very much sense -(performance-wise) to use "startswith".

+that "startswith" is by far faster than regular expressions. So +it makes very much sense (performance-wise) to use "startswith".

+

Note: when processing syslog messages, please note that $msg usually +starts with a space. The reason for this is RFC3164. Please read the +detail +description of what that means to you. In short, you need to make sure +that you include the first space if you use "startswith", otherwise you will +not get matches. -- cgit v1.2.3