> >> As we know /impstats/ module is used to fetch various stats of rsyslog
> >> for all the objects like actions, queues, etc.
> >>
> >> For each object separate stats log line is generated like,
> >>
> >> /Mon Jan 21 06:16:09 2019: @cee: { "*name*": "action-1-omelasticsearch",
> >> "_origin_": "core.action", "_processed_": 0, "_failed_": 0,
> >> "_suspended_": 0, "_suspended.duration_": 0, "_resumed_": 0 }/
> >>
> >> /Mon Jan 21 06:16:09 2019: @cee: { "*name*": "action-1-omelasticsearch
> >> queue", "_origi__n_": "core.queue", "_size_": 0, "_enqueued_": 0,
> >> "_full_": 0, "_discarded.full_": 0, "_discarded.nf_": 0, "_maxqsize_": 0 }/
> >>
> >> I have couple queries on this,
> >>
> >> 1) Is there a way to make the stats fields/key unique like, can the
> >> 'processed' field be perpended with value of name field ?
> >>
> >> e.g. from '/processed/' to '/action-1-omelasticsearch.processed'/
> >>
> > That would be possible but very verbose and redundant. You would need
> > to prefix all of the fields with the name, because they all belong to
> > the same name.
>
> how to do it ? through some kind of template, could you please provide
> some example?
No, I mean the code would need to do that. We could add an option, but
I question that it really is the right thing to do.
> >> 2) For aggregate stats processing, looking for a way to sum up the stats
> >> of all actions and queues for particular ruleset so that it eases in
> >> further analysis.
> >>
> >> for this I tried exploring writing python code, but rsyslog has external
> >> module support for the same and which is out of the proc execution.
> >>
> >> What I am looking is more like in process thing simillar to syslog-ng.
> > Can you point to how exactly you would like to have it?
> >
> > Rainer
>
> is it possible to define a python/anyOtherLanguage code block inside
> conf file and should be able to call the functions through some ruleset
> as a part of action(s). so that whatever changes made to messages are
> serialized and aggregated/modified messages are sent further to output
> module.
I see, we have a more generic and secure approach. See
https://www.rsyslog.com/doc/v8-stable/configuration/modules/mmexternal.html
Rainer
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
