Would Host/timestamp interceptors work for you ? http://flume.apache.org/FlumeUserGuide.html#timestamp-interceptor -Roshan
On Tue, Oct 16, 2012 at 2:27 PM, Filip Slunecko <[email protected]>wrote: > Hi, > > I am trying to use syslog source and sink it to hdfs or fileroller. > Everything is working, but "saved" logs are without timestamp and > hostname information. > Is it possible to force flume-ng to dump those information from syslog > header togather with body lines? > > I am using flume-ng-agent-1.2.0+24.4-1.noarch from Cloudera repository. > > Thanks, > > Filip >
