Re: [rsyslog] Transforming JSON Field Names in rawmsg

2018-10-02 Thread David Lang
On Tue, 2 Oct 2018, John Chivian wrote: Hello Group:    I am trying to determine the best way to transform the field names of a simple JSON object that is rawmsg.  The objects are fluid having both numeric and string content, but are always in the form...     { "aStr":

[rsyslog] Transforming JSON Field Names in rawmsg

2018-10-02 Thread John Chivian
Hello Group:    I am trying to determine the best way to transform the field names of a simple JSON object that is rawmsg.  The objects are fluid having both numeric and string content, but are always in the form...     { "aStr": "aString","bStr": "bString","cNum": 0,"dStr": "cString" }

Re: [rsyslog] Forwarding date folder named logs on an rsyslog server

2018-10-02 Thread Rich Megginson via rsyslog
On 10/2/18 4:39 AM, John Cooper via rsyslog wrote: Hi, our incoming syslogs are stored in date folders on the rsyslog server. We also want some of those logs forwarding to another server. Using imfile, the "File" name will change for the next day meaning we would have to update the config each