I need to reduce our licensing usage by filtering common, valid, no-news-is-good-news domains out of our Barracuda Web Filter logs. I am trying to do this by sending such log messages to the nullQueue, but I clearly am not doing it correctly.
The set_bwf transform works, but the bwf_discard transform does not.
Given that I am a regex newbie, I suspect that I have crafted the regular expression under "[bwf_discard]" incorrectly.
Here's what I have so far:
asked 15 Oct '10, 19:47
It looks like your regex should work, you don't need the
You can try this, but I suspect your issue is elsewhere.
If you don't have a regex testing tool, I'd highly suggested getting familiar with one. There are a number of free options out there, and it will save you time in the long run.
answered 16 Oct '10, 04:11