No problem at all - just wanted to say you had perfect timing :) Sent from phone, thus brief. Am 03.06.2013 21:09 schrieb "Brian Knox" <[email protected]>:
> Just got back home the other day - still jet lagged, so sorry if I pissed a > ping :) > > I'll get the diff to you tomorrow in my AM. > > Brian > > > On Mon, Jun 3, 2013 at 3:06 PM, Rainer Gerhards <[email protected] > >wrote: > > > I tried to pilk you today. You are right in time. Tomorrow would be great > > :) > > > > Sent from phone, thus brief. > > Am 03.06.2013 21:05 schrieb "Brian Knox" <[email protected]>: > > > > > Rainer - > > > > > > We have some patches for the zeromq input and output plugins that have > > just > > > come out of our own internal testing. The soonest I could get the > > patches > > > to you would be tomorrow morning (US EST). Since you're in the middle > of > > > trying to cut 7.4 stable, would you like those now, or should I hold > them > > > for 7.5? No worries either way. > > > > > > Brian > > > > > > > > > On Mon, Jun 3, 2013 at 12:10 PM, Rainer Gerhards > > > <[email protected]>wrote: > > > > > > > On Mon, Jun 3, 2013 at 4:48 PM, David Lang <[email protected]> wrote: > > > > > > > > > On Mon, 3 Jun 2013, Jacob Steinberger wrote: > > > > > > > > > > On 5/26/2013 7:51 AM, Rainer Gerhards wrote: > > > > >> > > > > >>> as far as I followed the discussion (aka "not very far" ;)), this > > > could > > > > >>> be > > > > >>> done with field-based extraction. I suggest to have a look at > this > > > > >>> presentation: > > > > >>> > > > > >>> > > > http://de.slideshare.net/**rainergerhards1/rsyslog-log-**normalization > > > > <http://de.slideshare.net/rainergerhards1/rsyslog-log-normalization> > > > > >>> > > > > >>> Especially slide 23+, but I'd go through all so that you have the > > > > >>> necessary > > > > >>> context. It contains actual config samples as well. Note that > this > > is > > > > for > > > > >>> v7, so outdated versions require either different syntax (but > field > > > > >>> extraction is supported in legacy templates) or do not support > some > > > > >>> features at all. > > > > >>> > > > > >>> HTH > > > > >>> Rainer > > > > >>> > > > > >> > > > > >> It does, but as you said, v7. Looking at one of the > > > rsyslog.comwebpages > > > > >> for v7 and log normalizations, it says that 7.3.6 of rsyslog is > > > > required. > > > > >> > > > > >> If I went through the trouble (political, not technical) of > > upgrading > > > > >> rsyslog to the last stable RPM release (7.2.7), would log > > > normalization > > > > >> with an input of CSV be doable? Or is 7.3.6+ really required? > > > > >> > > > > >> Trying to figure out if going through the hoops (again, political, > > not > > > > >> technical) of upgrading will get me the features I need or if I > need > > > to > > > > >> wait for a later stable release of the 7.3 branch. > > > > >> > > > > > > > > > > 7.2.7 does contain the mmnormalize module, so it should be able to > > > solve > > > > > your problem. > > > > > > > > > > the documentation on the rsyslog.com site is for the latest > version, > > > > look > > > > > through the documentation that you got as part of the 7.2.7 package > > for > > > > the > > > > > details of log normalization on that version. > > > > > > > > > > In any case, 7.4 stable is almost here. I am working hard on > getting > > > the > > > > announcement docs done and probably some late patch merging. My > > personal > > > > target is "this week". > > > > > > > > Rainer > > > > > > > > > David Lang > > > > > > > > > > ______________________________**_________________ > > > > > rsyslog mailing list > > > > > http://lists.adiscon.net/**mailman/listinfo/rsyslog< > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog> > > > > > http://www.rsyslog.com/**professional-services/< > > > > http://www.rsyslog.com/professional-services/> > > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > > myriad > > > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > > you > > > > > DON'T LIKE THAT. > > > > > > > > > _______________________________________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > > http://www.rsyslog.com/professional-services/ > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > myriad > > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you > > > > DON'T LIKE THAT. > > > > > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > > DON'T LIKE THAT. > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
