On 5/26/2013 7:51 AM, Rainer Gerhards wrote:
as far as I followed the discussion (aka "not very far" ;)), this could be
done with field-based extraction. I suggest to have a look at this
presentation:
http://de.slideshare.net/rainergerhards1/rsyslog-log-normalization
Especially slide 23+, but I'd go through all so that you have the necessary
context. It contains actual config samples as well. Note that this is for
v7, so outdated versions require either different syntax (but field
extraction is supported in legacy templates) or do not support some
features at all.
HTH
Rainer
It does, but as you said, v7. Looking at one of the rsyslog.com webpages
for v7 and log normalizations, it says that 7.3.6 of rsyslog is required.
If I went through the trouble (political, not technical) of upgrading
rsyslog to the last stable RPM release (7.2.7), would log normalization
with an input of CSV be doable? Or is 7.3.6+ really required?
Trying to figure out if going through the hoops (again, political, not
technical) of upgrading will get me the features I need or if I need to
wait for a later stable release of the 7.3 branch.
Jacob
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.