Hi
Having logs like:
/TIMESTAMP host app/pkg/class[1234]: this is my msg/
/TIMESTAMP host2 anotherApp/aNoTherPkg/aClass[1234]: this is another msg
TIMESTAMP super-host thisisanotherapp/aClassWithoutPackage[1234]:
guess what? this is another msg!/
*How could I split syslogtag* (I guess it should be like:
/app/pkg/class[1234]/) to get /app, pkg and class fields/ on my template?
I have been looking at
http://www.rsyslog.com/doc/v8-stable/configuration/property_replacer.html
to regular-expressions, but I'm not able to make it work.
Thanks in advance.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
