Re: [rsyslog] Filter on if json property exists

2015-08-13 Thread David Lang

On Thu, 13 Aug 2015, Brian Knox wrote:


Hello!  I was working on an rsyslog configuration today and realized I've
never run into a situation where I wanted to filter based on whether or not
a property derived from a call to mmjsonparse exists or not.  E.g., some
logs will have "myprop" in their json, I want to route all logs that do one
way, and all logs that do not another.


We don't have an exists() function (and it would be useful), but I've found that 
I can usually get away with $!var != ''.


David Lang
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.


Re: [rsyslog] Filter on if json property exists

2015-08-13 Thread Brian Knox
Thanks David - that looks reasonable.  I'll give it a try!

On Thu, Aug 13, 2015 at 4:54 PM, David Lang  wrote:

> On Thu, 13 Aug 2015, Brian Knox wrote:
>
> Hello!  I was working on an rsyslog configuration today and realized I've
>> never run into a situation where I wanted to filter based on whether or
>> not
>> a property derived from a call to mmjsonparse exists or not.  E.g., some
>> logs will have "myprop" in their json, I want to route all logs that do
>> one
>> way, and all logs that do not another.
>>
>
> We don't have an exists() function (and it would be useful), but I've
> found that I can usually get away with $!var != ''.
>
> David Lang
> ___
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
>
___
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.