multiple patterndb definitions

View thread

wallet

I want to use pattern matching on different streams, and have different patterndb xml file, like this ...

Filter for system logs

<Processor client_filter> Module pm_pattern PatternFile /data/conf/patterndb.xml </Processor>

Filter for SEQ

<Processor seq_filter> Module pm_pattern PatternFile /data/conf/seq_pattern.xml </Processor>

#Filter for RDS <Processor rds_filter> Module pm_pattern PatternFile /data/conf/rds_pattern.xml </Processor>

and call them like this...

<Route route2001> Path client2001 => client_filter => client_to_sumo,judo-sumo-uat,client_master </Route>

<Route route2002> Path client2002 => seq_filter => client_to_sumo,judo-sumo-uat,client_master </Route>

etc...

Is that possible? It doesn't seem to be working as I hoped.