[rsyslog] field extraction with v8 format syntax

2015-07-07 Thread Brian Knox
I wish to extract the second part of a hostname as a property.  The "field
replacer" ( where you set fromChar to "F" and toChar as the number of the
field you wish to extract) looks to fit the bill for what I want.

I realized I don't know how to specify fromChar / toChar in v8 format in a
list template.  Is this possible?  Or do I need to use a string template?

Brian
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] field extraction with v8 format syntax

2015-07-07 Thread Brian Knox
Aha found it -

   - field.number - obtain this field match
   - field.delimiter - decimal value of delimiter character for field
   extraction

Thanks anyway!

Brian

On Tue, Jul 7, 2015 at 11:29 AM, Brian Knox  wrote:

> I wish to extract the second part of a hostname as a property.  The "field
> replacer" ( where you set fromChar to "F" and toChar as the number of the
> field you wish to extract) looks to fit the bill for what I want.
>
> I realized I don't know how to specify fromChar / toChar in v8 format in a
> list template.  Is this possible?  Or do I need to use a string template?
>
> Brian
>
>
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.