On Mon, Jun 3, 2013 at 4:48 PM, David Lang <[email protected]> wrote: > On Mon, 3 Jun 2013, Jacob Steinberger wrote: > > On 5/26/2013 7:51 AM, Rainer Gerhards wrote: >> >>> as far as I followed the discussion (aka "not very far" ;)), this could >>> be >>> done with field-based extraction. I suggest to have a look at this >>> presentation: >>> >>> http://de.slideshare.net/**rainergerhards1/rsyslog-log-**normalization<http://de.slideshare.net/rainergerhards1/rsyslog-log-normalization> >>> >>> Especially slide 23+, but I'd go through all so that you have the >>> necessary >>> context. It contains actual config samples as well. Note that this is for >>> v7, so outdated versions require either different syntax (but field >>> extraction is supported in legacy templates) or do not support some >>> features at all. >>> >>> HTH >>> Rainer >>> >> >> It does, but as you said, v7. Looking at one of the rsyslog.com webpages >> for v7 and log normalizations, it says that 7.3.6 of rsyslog is required. >> >> If I went through the trouble (political, not technical) of upgrading >> rsyslog to the last stable RPM release (7.2.7), would log normalization >> with an input of CSV be doable? Or is 7.3.6+ really required? >> >> Trying to figure out if going through the hoops (again, political, not >> technical) of upgrading will get me the features I need or if I need to >> wait for a later stable release of the 7.3 branch. >> > > 7.2.7 does contain the mmnormalize module, so it should be able to solve > your problem. > > the documentation on the rsyslog.com site is for the latest version, look > through the documentation that you got as part of the 7.2.7 package for the > details of log normalization on that version. > > In any case, 7.4 stable is almost here. I am working hard on getting the announcement docs done and probably some late patch merging. My personal target is "this week".
Rainer > David Lang > > ______________________________**_________________ > rsyslog mailing list > http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adiscon.net/mailman/listinfo/rsyslog> > http://www.rsyslog.com/**professional-services/<http://www.rsyslog.com/professional-services/> > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
