I have been using mmexternal to modify pstats messages for quite some time.
syslog.* {
if ($programname == "rsyslog-pstats") then {
action (
type="mmexternal"
name="normalize-pstats"
binary="/path/to/binary"
interface.input="msg"
)
call to_pstats_siem
call to_pstats_debug
} else {
action (
type="omfile"
name="syslog"
file="/var/log/syslog"
)
}
}
On 2/1/19 4:26 AM, David Lang via rsyslog wrote:
take a look at the dyn_stats() capability, it lets you create your own
stats that get reported as part of the pstats output.
https://www.rsyslog.com/doc/master/configuration/dyn_stats.html
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
if you DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
