On Mon, 3 Jun 2013, Jacob Steinberger wrote:
On 5/26/2013 7:51 AM, Rainer Gerhards wrote:
as far as I followed the discussion (aka "not very far" ;)), this could be
done with field-based extraction. I suggest to have a look at this
presentation:
http://de.slideshare.net/rainergerhards1/rsyslog-log-normalization
Especially slide 23+, but I'd go through all so that you have the necessary
context. It contains actual config samples as well. Note that this is for
v7, so outdated versions require either different syntax (but field
extraction is supported in legacy templates) or do not support some
features at all.
HTH
Rainer
It does, but as you said, v7. Looking at one of the rsyslog.com webpages for
v7 and log normalizations, it says that 7.3.6 of rsyslog is required.
If I went through the trouble (political, not technical) of upgrading rsyslog
to the last stable RPM release (7.2.7), would log normalization with an input
of CSV be doable? Or is 7.3.6+ really required?
Trying to figure out if going through the hoops (again, political, not
technical) of upgrading will get me the features I need or if I need to wait
for a later stable release of the 7.3 branch.
7.2.7 does contain the mmnormalize module, so it should be able to solve your
problem.
the documentation on the rsyslog.com site is for the latest version, look
through the documentation that you got as part of the 7.2.7 package for the
details of log normalization on that version.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
