Nice.  I figured you would provide a string gen module of some sort once
the spec was finalized.  For now for testing and experimenting I'll just
whip up some "close enough" templates based on current CEE spec and
discussions.

Brian

On Wed, Mar 14, 2012 at 9:25 AM, Rainer Gerhards
<[email protected]>wrote:

>  -----Original Message-----
> > From: [email protected] [mailto:rsyslog-
> > [email protected]] On Behalf Of Brian Knox
> > Sent: Wednesday, March 14, 2012 2:22 PM
> > To: rsyslog-users
> > Subject: [rsyslog] rsyslog properties to CEE fields
> >
> > Is there an existing document that maps rsyslog properties (
> > http://www.rsyslog.com/doc/property_replacer.html) and CEE fields?
> No, simply because there is no stable reference yet of the CEE fields. I
> whish myself I had such a list.
>
> Please note that I plan to provide a property remapping capability (maybe a
> plugin) in the not so distant future to rename CEE (better: JSON) fields on
> the fly. A prime use case is keeping things consistent between changing CEE
> (and other) dictionaries.
>
> Rainer
>
> > Before
> > I start working out the mapping myself I figured I'd check to see if it
> > were available.  I'm working on some test / example rsyslog templates
> > for
> > converting "unstructured" rfc3164 to "cee enhanced" syslog messages.
> >
> > Brian
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
>
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/

Reply via email to