Hi, I have done tests with logstash. I can parse easily currents logs, so no need for json format.
Only thing,is that logstash works better(more precision), with ISO_8601 date format. They are a example in json ulogd plugin http://git.netfilter.org/ulogd2/commit/?id=2b39df550fbad944b4aab77617d4272c5d62ba70 + if (pp_is_valid(inp, opi->usec_idx)) { + snprintf(timestr, MAX_LOCAL_TIME_STRING, + "%04d-%02d-%02dT%02d:%02d:%02d.%06u", + t->tm_year + 1900, t->tm_mon + 1, + t->tm_mday, t->tm_hour, + t->tm_min, t->tm_sec, + ikey_get_u32(&inp[opi->usec_idx])); + } else { + do you think it's possible to add such option ? _______________________________________________ pve-devel mailing list [email protected] http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
