We're working on getting syslogging set-up now with Orion and I'm wondering if I can remove text from the message.
I have orion removing the date and message type so I amd left with the following as an example:
1145: UTC: Configured from console by console
What I would like to do is remove the first two pieces so I am left with:
Configured from console by console
(the 1145 increment with every message)
I tried a replace in syslog message like this:
^/d+:
Can regex be used in the replace?