> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Brian Knox > Sent: Tuesday, October 30, 2012 6:33 PM > To: rsyslog-users > Subject: [rsyslog] subtree templates > > I'm playing with the new template syntax today and for the most part > am having a lot of success. The one thing I find a bit confusing > still is working with the new subtree template types. Given a subtree > that simply includes all properties: > > template(name="normalizeTest" type="subtree" subtree="$!") > > How can I say, add a line break to the end of the template, or combine > this with other constants?
I guess the doc does not yet explain this well enough. You actually can't - because this type of template is aimed at plugins that do want fields. So if you want a constant field, you set some filed name to the constant and pass that in. I assume this is not what you want. I guess you want to have some text template, and in this json. This is quite straightforward, but cannot be done with subtree templates. Just use the other ones, subtrees will be expanded as text: template(name="xxx" type="string" string="%$!%\n") Note that in this format, the subtree is actually a SINGLE string FIELD, so this is usually not what a structure-aware plugin would want (except, of course, if it simply needs to forward that string to a final destination). Does that help? Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
