I’m processing syslog messages and I’d like to combine multi-line messages into a single entry before processing the entries.
Matt, DFSORT has the capability of combining multiple lines into a single line using WHEN=GROUP. You can easily identify the continuation line as it will NOT have the Timestamp at position 21 ( assuming your syslog dataset is FBM 133 LRECL) . You validate that value and push the records and finally create 1 single line of data. I already have a working example of combining up to 20 lines into a single record. We can automate this job to combine up to 999 records also. If you are interested I can post the solution if you let me know 1. Your Syslog DCB properties (LRECL, RECFM) 2. Maximum number of continuation lines that you want to combine (2 to 999) 3. Do you want the intermittent spaces to be squeezed out and have the data as a continuous text? Thanks, Kolusu DFSORT Development IBM Corporation ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
