This article provides information when some Kiwi Syslog message containing double quotes. The text need to be filtered.
An example message:
All Kiwi Syslog versions
As the text based filters use double quotes in order to identify the required text in a syslog message it is not possible to use the double quotes inside the message text in a simple or complex filter.
To overcome this, it is necessary to use a regular expression filter with the \(exclude symbol) in combination with the ASCII character set hexadecimal value.
In order to filter on the example above:
The \x22 is the escape sequence for the double quote symbol, x indicates the ASCII hexadecimal code ".
To obtain other ASCII values, see http://www.ascii-code.com/ for a complete listing of the hexadecimal values for each of the ASCI characters.