pdbtool(1) pdbtool pdbtool(1) (NAME) pdbtool - {{ site.product.short_name }} (SYNOPSIS) pdbtool [command] [options] (DESCRIPTION) . syslog-ng OSE ( patterndb ) . syslog-ng OSE . . logcheck syslog-ng OSE (regular expressions) logcheck . pdbtool : o o o o o (dump) RADIX ( ) . DICTIONARY (THE DICTIONARY COMMAND) dictionary [options] - . --dump-tag -T -. --pdb -p . --program -P - ${PROGRAM} . DUMP (THE DUMP COMMAND) dump [options] RADIX . syslog-ng OSE . dump PROGRAM MSG . --debug -d / stderr. --pdb -p . --program -P RADIX ${PROGRAM} . --program-tree -T ${PROGRAM} . --verbose -v (verbose) stderr. (EXAMPLE): pdbtool dump -p patterndb.xml -P 'sshd' 'p' 'assword for' @QSTRING:@ 'from' @QSTRING:@ 'port ' @NUMBER:@ rule_id='fc49054e-75fd-11dd-9bba-001e6806451b' ' ssh' rule_id='fc55cf86-75fd-11dd-9bba-001e6806451b' '2' rule_id='fc4b7982-75fd-11dd-9bba-001e6806451b' 'ublickey for' @QSTRING:@ 'from' @QSTRING:@ 'port ' @NUMBER:@ rule_id='fc4d377c-75fd-11dd-9bba-001e6806451b' ' ssh' rule_id='fc5441ac-75fd-11dd-9bba-001e6806451b' '2' rule_id='fc44a9fe-75fd-11dd-9bba-001e6806451b' match [] match . . 0 () 1 ( ) : o ( system violation ) o (ID) o ( ). match : --color-out -c . --debug -d / stderr. --debug-csv -C `--debug-pattern` (CSV). --debug-pattern -D . `--debug-csv` . --file= -f . . (stdin) (-) . --filter= -F syslog-ng OSE . --message -M ( `MESSAGE` syslog). --pdb -p . --program -P `PROGRAM` syslog . --template= -T syslog-ng OSE . --verbose -v (verbose) stderr. patterndb.xml Accepted publickey for myuser from 127.0.0.1 port 59357 ssh6 : pdbtool match -p patterndb.xml -P sshd -M "Accepted publickey for myuser from 127.0.0.1 port 59357 ssh6" : (EXAMPLE: APPLY) sshd.pdb /var/log/messages useracct . pdbtool match -p sshd.pdb \ -file /var/log/messages \ -filter `tags("usracct");' MERGE (THE MERGE COMMAND) merge [options] merge ( ). (V3) . The syslog-ng OSE Administrator Guide . --debug -d / stderr. --directory -D XML . --glob -G glob (wildcards). glob man glob . . --pdb -p . --recursive -r . --sort -s ( ). --verbose -v (verbose) stderr. : (EXAMPLE: MERGE) pdbtool merge --recursive --directory /home/me/mypatterns/ --pdb /var/lib/syslog-ng/patterndb.xml . PATTERNIZE (THE PATTERNIZE COMMAND) patternize [options] . (stdout) . pdbtool patternize @ESTRING:: @ . The syslog-ng OSE Administrator Guide . patternize 3.2 . --debug -d / stderr. --file= -f . (stdin) - . --iterate-outliers -o . --named-parsers -n . : 1 --no-parse -p . --samples= .dict.string1 .dict.string2 . --support= -S . 1000 --support=3.0 3 ( 30 ) . patternize support . : 4.0 --verbose -v (verbose) stderr..SS ": PATTERNIZE" pdbtool patternize --support=2.5 --file=/var/log/messages TEST (THE TEST COMMAND) test [options] test XML . xmllint . test syslog-ng OSE . --color-out -c . --debug -d / stderr. --debug -D . --rule-id -r patterndb ( ) . --validate XML . --verbose -v stderr. : TEST pdbtool test --validate /home/me/mypatterndb.pdb (FILES) /Users/hofi/Develop/Balabit/syslog-ng/build/install/ /Users/hofi/Develop/Balabit/syslog-ng/build/install/etc/syslog-ng.conf : syslog-ng OSE syslog-ng OSE Administration Guide[1] syslog-ng OSE mailing list[2] . syslog-ng OSE syslog-ng OSE blogs[3] . (AUTHORS) syslog-ng OSE Administration Guide[1] . (COPYRIGHT) (NOTES) [1] syslog-ng OSE Administration Guide [2] syslog-ng OSE mailing list [3] syslog-ng OSE blogs 4.10.2 18 December 2025 pdbtool(1)