Skip to content
This repository has been archived by the owner on Apr 19, 2021. It is now read-only.

Commit

Permalink
change variable name for syslog source
Browse files Browse the repository at this point in the history
  • Loading branch information
theflakes committed Jun 4, 2015
1 parent 28ce80d commit 4ca4a0c
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions etc/nsm/ossec/ossec_agent.tcl
Original file line number Diff line number Diff line change
Expand Up @@ -213,7 +213,7 @@ proc ProcessData { line } {
# ^(\d\d\d\d)\s+(...)\s+(\d\d)\s+(\d\d:\d\d:\d\d)\s+(.*)->
# ^(\d\d\d\d)\s+(...)\s+(\d\d)\s+(\d\d:\d\d:\d\d)\s+(\(.*\)\s+)*(.*)->
^(\d\d\d\d)\s+(...)\s+(\d\d)\s+(\d\d:\d\d:\d\d)\s+(\(.*\)\s+)*(\S+)->(\d+.\d+.\d+.\d+)*
} $line MatchVar year month day time placeholder agent SyslogSource]) } {
} $line MatchVar year month day time placeholder agent syslog_source]) } {
set nDate [clock format [clock scan "$day $month $year $time" ] -gmt true -f "%Y-%m-%d %T"]
# Ok, this is confusing, but the regexp can return either one
# or two variables, depending on the format of the input line.
Expand All @@ -224,8 +224,8 @@ proc ProcessData { line } {
# variable ends up holding the correct value for our purposes.
# SyslogSource will pull out the IP of the device sending a
# syslog to OSSEC.
if {[string length $SyslogSource] != 0} {
set agent $SyslogSource
if {[string length $syslog_source] != 0} {
set agent $syslog_source
} else {
set agent [ResolveHostname $agent]
}
Expand Down

0 comments on commit 4ca4a0c

Please sign in to comment.