[Bug 1105985] [NEW] regex, contains and startswith not working for syslogtag with a value containing whitespace

[Frank Schäckermann]

Public bug reported:

While a line in rsyslog.conf like

:syslogtag,startswith,"WebSphere" -/var/log/wmb.log

works for messages with a syslogtag of "WebSphere Broker v8001[2701]"

the lines

:syslogtag,startswith,"WebSphere Broker" -/var/log/wmb.log
:syslogtag,contains,"WebSphere Broker" -/var/log/wmb.log
:syslogtag,regex,"WebSphere.Broker.*" -/var/log/wmb.log

do not work and the messages are not written to the log file.

This is for rsyslogd: [origin software="rsyslogd" swVersion="5.8.6" x-pid="2681" x-info="http://www.rsyslog.com"]
from package rsyslog-5.8.6-1ubuntu8 on Ubuntu

Description:	Ubuntu 12.04.1 LTS
Release:	12.04

** Affects: rsyslog (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: compare-operator filter rsyslog

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rsyslog in Ubuntu.
https://bugs.launchpad.net/bugs/1105985

Title:
  regex, contains and startswith not working for syslogtag with a value
  containing whitespace

Status in “rsyslog” package in Ubuntu:
  New

Bug description:
  While a line in rsyslog.conf like

  :syslogtag,startswith,"WebSphere" -/var/log/wmb.log

  works for messages with a syslogtag of "WebSphere Broker v8001[2701]"

  the lines

  :syslogtag,startswith,"WebSphere Broker" -/var/log/wmb.log
  :syslogtag,contains,"WebSphere Broker" -/var/log/wmb.log
  :syslogtag,regex,"WebSphere.Broker.*" -/var/log/wmb.log

  do not work and the messages are not written to the log file.

  This is for rsyslogd: [origin software="rsyslogd" swVersion="5.8.6" x-pid="2681" x-info="http://www.rsyslog.com"]
  from package rsyslog-5.8.6-1ubuntu8 on Ubuntu

  Description:	Ubuntu 12.04.1 LTS
  Release:	12.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1105985/+subscriptions