Thanks for your reply deoren (due to some issue I had to read your mail on the web archive http://rsyslog-users.1305293.n2.nabble.com/Add-the-file-name-to-syslog-data-td7592722.html), your approach is very neat unfortunately I need to send the data both to graylog and syslog-ng. At this point we're not yet confident enough to rely only on graylog (we'd need to do a proper multiserver install that's not yet an option) I will have to find a syslog compatible solution
2017-09-28 13:37 GMT+02:00 Joan <aseq...@gmail.com>: > I am using rsylog to read (imfile) some logfiles and forward them to > graylog in syslog format RFC5424. > I would like to add an attribute with the filename, I explored doing it by > modifiing the template (such as this > <http://kb.monitorware.com/identify-source-filename-remote-logging-t12694.html>). > But it will just add the information into the begin of the message, > breaking some extractors I have in place. > I though after reading about the RFC5424 that another option would be to > add this data into the structured data fields (such as origin), but I > couldn't find any example on how to add this information. Could you point > me to some docs? > > Regards, > > Joan > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
