trigger() group option example (#146)

Added example for trigger option in grouping-by parser description . Signed-off-by: Zsolt Gyulai (zgyulai) <[email protected]>
syslog-ng · Oct 21, 2024 · a5ab0d4 · a5ab0d4
2 parents 7d21e54 + 8e75e7d
commit a5ab0d4
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/doc/_admin-guide/130_Correlating_log_messages/002_grouping-by_options.md b/doc/_admin-guide/130_Correlating_log_messages/002_grouping-by_options.md
@@ -162,6 +162,15 @@ sends the triggered message (specified in the
 aggregate(), and clears the
 context.
 
+### Example: Configuring trigger() with a 100 message context length
+
+```config
+parser p_grouping-by {grouping-by(
+    ...
+    trigger("$(context-length)" > "100")
+);};
+```
+
 ## where()
 
 *Description:* Specifies a filter condition. Messages not matching the