You can find all the documentation @ http://www.liblognorm.com/files/manual/index.html <http://www.liblognorm.com/files/manual/index.html>
when using "char-to" field type you need to set the extra data parameter so it knows what character to stop at. In your example it would be %hour:char-to:-% where "-" represents the character after the hour. remember that you will still need to account for "-" as a literal afterwards. That said you could also just use the field type "date-iso" to capture your date string, depending on what your trying to do. ~Regards Matthew Gaetano -- View this message in context: http://rsyslog-users.1305293.n2.nabble.com/Rsyslog-to-JSON-parser-tp7591413p7591440.html Sent from the rsyslog-users mailing list archive at Nabble.com. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
