Re: can kv-parser options be from macros

--===============6123293023450543700==
Content-Type: multipart/alternative; boundary="0000000000004bbf6d0625ec3373"

--0000000000004bbf6d0625ec3373
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

 Not at the moment. But if you can explain what you'd like to accomplish I
can help. Is it LEEF maybe?

Bal=C3=A1zs

On Fri, Nov 1, 2024, 18:02 Evan Rempel <[email protected]> wrote:

> Does anyone know if I can use the enriching data to set macros  that can
> then be used as kv-parser options.
> These values might change on a message by message basis.
> For example:
>
> parser p_kv {
>     kv-parser (
>         prefix("$kv_prefix")
>         value-separator("$kv_vseparator")
>         pair-separator("$kv_pseparator")
>     );
> };
>
> --
> Evan
>
> _________________________________________________________________________=
_____
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=3Dsyslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>

--0000000000004bbf6d0625ec3373
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">=C2=A0Not at the moment. But if you can explain what you&=
#39;d like to accomplish I can help. Is it LEEF maybe?<div dir=3D"auto"><br=
></div><div dir=3D"auto">Bal=C3=A1zs=C2=A0</div></div><br><div class=3D"gma=
il_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Fri, Nov 1, 2024, 18:02 =
Evan Rempel &lt;<a href=3D"mailto:[email protected]">[email protected]</a>&gt; =
wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8e=
x;border-left:1px #ccc solid;padding-left:1ex">




<div dir=3D"ltr">
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Does anyone know if I can use the enriching data to set macros=C2=A0 that c=
an then be used as kv-parser options.</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
These values might change on a message by message basis.</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
For example:</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
parser p_kv {</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
=C2=A0 =C2=A0 kv-parser (</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
=C2=A0 =C2=A0 =C2=A0 =C2=A0 prefix(&quot;$kv_prefix&quot;)<br>
=C2=A0 =C2=A0 =C2=A0 =C2=A0 value-separator(&quot;$kv_vseparator&quot;)</di=
v>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
=C2=A0 =C2=A0 =C2=A0 =C2=A0 pair-separator(&quot;$kv_pseparator&quot;)</div=
>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
=C2=A0 =C2=A0 );</div>
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
};</div>
<div id=3D"m_-3747455258038928622Signature">
<div style=3D"font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Cali=
bri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style=3D"font-family:&quot;Courier New&quot;,monospace;color:rgb(153,1=
53,153)"><span style=3D"font-size:14.6667px;background-color:rgb(255,255,25=
5)">--</span><span style=3D"font-size:12pt"><br>
</span><span style=3D"font-size:14.6667px;background-color:rgb(255,255,255)=
">Evan</span></div>
</div>
</div>

___________________________________________________________________________=
___<br>
Member info: <a href=3D"https://lists.balabit.hu/mailman/listinfo/syslog-ng=
" rel=3D"noreferrer noreferrer" target=3D"_blank">https://lists.balabit.hu/=
mailman/listinfo/syslog-ng</a><br>
Documentation: <a href=3D"http://www.balabit.com/support/documentation/?pro=
duct=3Dsyslog-ng" rel=3D"noreferrer noreferrer" target=3D"_blank">http://ww=
w.balabit.com/support/documentation/?product=3Dsyslog-ng</a><br>
FAQ: <a href=3D"http://www.balabit.com/wiki/syslog-ng-faq" rel=3D"noreferre=
r noreferrer" target=3D"_blank">http://www.balabit.com/wiki/syslog-ng-faq</=
a><br>
<br>
</blockquote></div>

--0000000000004bbf6d0625ec3373--

--===============6123293023450543700==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq


--===============6123293023450543700==--