On Mon, 16 Dec 2013, Pavel Levshin wrote:
16.12.2013 18:24, waqar afridi:
Thanx Pavel for such a nice and quick reply :) It worked :) but How would I
parse this log, It append the log with the date and System name and It then
the message copy the message (a line) and displays it. Why not take all the
information from the log source like The Time that entry was generated and
the name of the machine on which it was generated?
This would involve parsing strings from the file, and result depends on it's
contents. But you can define your own output template
(http://www.rsyslog.com/doc/rsyslog_conf_templates.html), and then attach it
to an output action. This way, you could pass messages as-is, without
attaching some of redundant info.
If you absolutely need to parse, there are a few ways to do it, from regexps
and fields, to using http://www.rsyslog.com/doc/mmnormalize.html
Currently imfile treats everything in the file as message data. It doesn't parse
anything. I believe that the in-progress rewrite of imfile introduces options to
parse the lines being read.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
