SRX Services Gateway
Highlighted
SRX Services Gateway

Excldue multiple strings from syslog messages

‎03-15-2016 01:35 PM

I'd like to exclude multiple strings from syslog messages. I know how to do this for a single string:

 

 

user@SRX_FW# show system syslog host 10.1.0.40
any notice;
match "!(.*WEBFILTER_URL_BLOCKED.*)";

My question is how do I format the syntax to ignore multiple strings? The syntaxes that logically made sense to me returned this error: repetition-operator operand invalid at '!(.*WEBFILTER_URL_BLOCKED.*|*RT_SCREEN_IP: IP spoofing*)'

 

Thanks,

 

Matthew

 

1 REPLY 1
SRX Services Gateway
Solution
Accepted by topic author mdhtbm
‎03-16-2016 09:41 AM

Re: Excldue multiple strings from syslog messages

‎03-15-2016 02:22 PM

At a guess try:

match "!(.*foo.*)|!(.*bar.*)";

Sorry if it's wrong, it's just a guess.

 

Regards,

Andy