On Wed, 7 Dec 2016, [email protected] wrote:
almost, %@apache% makes no more sense than %word%, you need to give the
match a name
so %log:@apache% would work, or if you want to move everything up a later
(rather than having $!apache!ip) you could do %.:@apache%
That should work
How would that be using JSON syntax?
{"type":"@apache" name="."} ?
actuall, %{"type":"@apache" name="."}%
This is one of the places where I like to use the older, more compact syntax :-)
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
