El lun., 4 feb. 2019 a las 7:53, vishal via rsyslog
(<[email protected]>) escribió:
>
> Thanks John, will explore mmexternal further.
>
> Just a quick query, can does mmexternal works perfectly fine in pipeline?
>
> like,
>
> imudp -> mmexternal -> omelasticsearch
yes, that it was written for.
HTH
Rainer
>
>
> Thanks,
>
> Vishal Patil.
>
> On 01/02/19 4:48 PM, John Chivian wrote:
> > I have been using mmexternal to modify pstats messages for quite some
> > time.
> >
> > syslog.* {
> > if ($programname == "rsyslog-pstats") then {
> > action (
> > type="mmexternal"
> > name="normalize-pstats"
> > binary="/path/to/binary"
> > interface.input="msg"
> > )
> > call to_pstats_siem
> > call to_pstats_debug
> > } else {
> > action (
> > type="omfile"
> > name="syslog"
> > file="/var/log/syslog"
> > )
> > }
> > }
> >
> >
> >
> > On 2/1/19 4:26 AM, David Lang via rsyslog wrote:
> >> take a look at the dyn_stats() capability, it lets you create your
> >> own stats that get reported as part of the pstats output.
> >>
> >> https://www.rsyslog.com/doc/master/configuration/dyn_stats.html
> >>
> >> David Lang
> >> _______________________________________________
> >> rsyslog mailing list
> >> http://lists.adiscon.net/mailman/listinfo/rsyslog
> >> http://www.rsyslog.com/professional-services/
> >> What's up with rsyslog? Follow https://twitter.com/rgerhards
> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
> >> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT
> >> POST if you DON'T LIKE THAT.
> >
> >
> > _______________________________________________
> > rsyslog mailing list
> > http://lists.adiscon.net/mailman/listinfo/rsyslog
> > http://www.rsyslog.com/professional-services/
> > What's up with rsyslog? Follow https://twitter.com/rgerhards
> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
> > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST
> > if you DON'T LIKE THAT.
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T
> LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
