@ttyS1 wrote:

i do not know maybe it is me, but patterndb is just undigastable for me. @PCzanik @algernoone #syslog-ng

It's XML, with terrible tooling. There have been attempts at writing a sane DSL that compiles to patterndb, but it didn't get far. There were also attempts to bring in Grok (work in progress), and I wrote my own replacement too (outside of syslog-ng, without corellation). Long story short, patterndb is something nobody likes, but nobody is hyped to do something better, either.