[Bug 293879] syslogd: alternation in ereregex property-based filter does not work

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 17 Mar 2026 14:15:39 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293879

            Bug ID: 293879
           Summary: syslogd: alternation in ereregex property-based filter
                    does not work
           Product: Base System
           Version: 15.0-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: work+freebsd@vvv.kiev.ua

Alternation in ereregex property-based filter does not work.

Steps to reproduce:

1. Add filter at the beginning of /etc/syslog.conf:
:msg, !ereregex, "substring1|substring2"

2. Apply new config:
killall -1 syslogd

3. Send message to syslog:
logger -p auth.notice "substring1"
logger -p auth.notice "substring2"
logger -p auth.notice "substring3"

Only the last message should appear in /var/log/messages.
But all messages will appear:

Mar 17 15:58:09 host user[85236]: substring1
Mar 17 15:58:14 host user[85240]: substring2
Mar 17 15:59:35 host user[85276]: substring3

-- 
You are receiving this mail because:
You are the assignee for the bug.