Matthew, Thank you for this explanation it's very useful !!
I need some help with data format for example I have this string : 2016-11-03 I think the correct parser is %hour:char-to::% but in this case I get only first 2 characters and not the complete string. Do you have any example an it's functional? Have any documentation about this parsers? I have been searching about this thread in rsyslog documentation but no sucess. Tks again ~Regards _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

