Ok, I couldn't resist!

add:

use Algorithm::Diff;

[download]

toward the start. In sub add change:

        push @{$context->{tails}}, $line;

[download]

to:

        push @{$context->{tails}}, [$line =~ /(\S+)/g];

[download]

In sub mergeTails replace everything after:

    my @groups;

[download]

with:

    push @{$groups[@$_]}, $_ for @tails;
    @groups = grep {defined $_} @groups;
    
    for my $group (@groups) {
        my @ref = @{$group->[-1]};
        my @org = @ref;
        my $count = 1;
        
        pop @$group;
        
        while (@$group) {
            my @new = @{pop @$group};
            my @diffs = Algorithm::Diff::diff (\@ref, \@new);
            
            for my $change (@diffs) {
                next unless $change->[0][0] eq '-';
                $ref[$change->[0][1]] = undef;
            }

            ++$count;
        }

        for (0 .. $#ref) {
            next if defined $ref[$_];
            $org[$_] = '*****';
        }
        
        push @{$context->{digest}}, [join (' ', @org), $count];
    }

[download]

Now prints:

infocache02
    ldap_cachemgr
        (1) Error: Unable to refresh from profile:tls_automount_profil
+e. (error=1)
        (1) libsldap: Status: 91 Mesg: openConnection: simple bind fai
+led - Can't connect to the LDAP server
    sendmail
        (3) ***** Losing ***** savemail panic
        (2) ***** SYSERR(root): savemail: cannot save rejected email a
+nywhere
mail2-in
    postfix/smtpd
        (2) warning: 84.9.96.201: address not listed for hostname mail
+.intechcentre.com
        (4) warning: ***** hostname ***** verification failed: hostnam
+e nor servname provided, or not known
mail2-out
    ntpd
        (5) ***** Bad file descriptor
    postfix/smtp
        (1) warning: valid_hostname: empty hostname
        (1) warning: malformed domain name in resource data of MX reco
+rd for hotmil.com:
    postfix/smtp[32282]
        (1) warning: numeric domain name in resource data of MX record
+ for uyahoo.com: 10.0.0.2

[download]
DWIM is Perl's answer to Gödel

In reply to Re^2: adaptive syslog message parsing by GrandFather
in thread adaptive syslog message parsing by Anonymous Monk

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.