----- Original Message ----- > From: "Rainer Gerhards" <[email protected]> > To: "rsyslog-users" <[email protected]> > Sent: Thursday, July 25, 2013 8:26:42 PM > Subject: Re: [rsyslog] [PATCH] mmcount: message modification plugin which > counts messages > > FYI: i managed to implement global vars, but not yet atomic increments. > Its in master branch. >
Thanks Rainer. I will look into it. Regards, Bala > Sent from phone, thus brief. > Am 23.07.2013 06:10 schrieb "Balamurugan Arumugam" <[email protected]>: > > > > > > > ----- Original Message ----- > > > From: "Rainer Gerhards" <[email protected]> > > > To: "rsyslog-users" <[email protected]> > > > Sent: Monday, July 22, 2013 1:54:48 PM > > > Subject: Re: [rsyslog] [PATCH] mmcount: message modification plugin > > which counts messages > > > > > > IMHO this is a tactical interim solution to be replaced when global vars > > > are available (Which are hopefully soon). > > > > > > > Yes. Once global variables support is ready, most of the functionality > > provided by this module will be replaced. > > > > Regards, > > Bala > > > > > > > > > Rainer > > > > > > > > > On Mon, Jul 22, 2013 at 7:55 AM, David Lang <[email protected]> wrote: > > > > > > > Question, how would you track more than one count? > > > > > > > > If the variable set was $!<appname> or $!<gf_code>, this would be > > obvious, > > > > but it looks like you used $!mmcount, which is the module name. > > > > > > > > Why do you have both an appname and a key? > > > > > > > > Also, now that we have added the concept of local variables (things > > that > > > > won't show up if you output $! or $!json-all), should these counts be > > moved > > > > from the $! namespace to the $. local namespace? > > > > > > > > David Lang > > > > > > > > > > > > On Thu, 23 May 2013, Balamurugan Arumugam wrote: > > > > > > > > Here is a new message modifier plugin (mmcount) attached as patch file > > > >> which counts each log messages by severity or json property of given > > > >> app-name. Below is more information from commit log > > > >> > > > >> This module provides the capability to count log messages by severity > > > >> or json property of given app-name. The count value is added into the > > > >> log message as json property named 'mmcount' > > > >> > > > >> Example usage of the module in the configuration file > > > >> > > > >> module(load="mmcount") > > > >> > > > >> # count each severity of appname gluster > > > >> action(type="mmcount" appname="gluster") > > > >> > > > >> # count each value of gf_code of appname gluster > > > >> action(type="mmcount" appname="glusterd" key="!gf_code") > > > >> > > > >> # count value 9999 of gf_code of appname gluster > > > >> action(type="mmcount" appname="glusterfsd" key="!gf_code" > > value="9999") > > > >> > > > >> # send email for every 50th mmcount > > > >> if $app-name == 'glusterfsd' and $!mmcount <> 0 and $!mmcount % 50 == > > 0 > > > >> then { > > > >> $ActionMailSMTPServer smtp.example.com > > > >> $ActionMailFrom [email protected] > > > >> $ActionMailTo [email protected] > > > >> $template mailSubject,"50th message of gf_code=9999 on %hostname%" > > > >> $template mailBody,"RSYSLOG Alert\r\nmsg='%msg%'" > > > >> $ActionMailSubject mailSubject > > > >> $**ActionExecOnlyOnceEveryInterva**l 30 > > > >> :ommail:;RSYSLOG_**SyslogProtocol23Format > > > >> } > > > >> > > > >> Please provide your feedback by reviewing the patch. > > > >> > > > >> Thanks in advance, > > > >> > > > >> Regards, > > > >> Bala > > > >> > > > >> ______________________________**_________________ > > > > rsyslog mailing list > > > > http://lists.adiscon.net/**mailman/listinfo/rsyslog< > > http://lists.adiscon.net/mailman/listinfo/rsyslog> > > > > http://www.rsyslog.com/**professional-services/< > > http://www.rsyslog.com/professional-services/> > > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > > myriad > > > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > > > DON'T LIKE THAT. > > > > > > > _______________________________________________ > > > rsyslog mailing list > > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > > http://www.rsyslog.com/professional-services/ > > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of > > > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > > > LIKE THAT. > > > > > _______________________________________________ > > rsyslog mailing list > > http://lists.adiscon.net/mailman/listinfo/rsyslog > > http://www.rsyslog.com/professional-services/ > > What's up with rsyslog? Follow https://twitter.com/rgerhards > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > > DON'T LIKE THAT. > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
