Skip to main content
Version: User Guide 6.5

Field Modifiers

Length Limit​

Add a number as a modifier to limit the maximum length of a formatted field.
Example: {MESSAGE|100} - the entire length of the formatted MESSAGE field is limited to 100 bytes.

caution

The length is in bytes (not symbols). It is important for non-ASCII encodings.

Example

For {MESSAGE} equals Abcdef,
{MESSAGE|3} produces Abc

UPPER / lower​

Syslog Watcher provides two modifiers to convert the casing of a field text: UPPER and lower.

Example

For {MESSAGE} equals Abc,
{MESSAGE|UPPER} produces ABC
{MESSAGE|lower} produces abc

Blank Field Filler​

Example

For {MESSAGE} equals Abc,
{MESSAGE|?Blank} produces Abc

Example

For blank {MESSAGE},
{MESSAGE|?Blank} produces Blank

Regular Expression​

To transform a field with a regular expression, add the modifier expression enclosed in r/.../