Is there an existing document that maps rsyslog properties ( http://www.rsyslog.com/doc/property_replacer.html) and CEE fields? Before I start working out the mapping myself I figured I'd check to see if it were available. I'm working on some test / example rsyslog templates for converting "unstructured" rfc3164 to "cee enhanced" syslog messages.
Brian _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/

