| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
| |
These fields are only relevant in field templates (i.e. mongodb): a
field for a non-existent CEE property is not created (instead of being
set to an empty string).
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
Let msg.c handle appending fields, which also allows it to append more
than one field per replaced property.
The result allows supplementing CEE data with other (non-constant)
properties, but will currently result in duplicates if $!all-json and
the template contain fields with the same names.
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| |
|
|
| |
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
The mongodb test contains only debug printfs.
Example template, inspired by writeMongoDB_msg:
$template MongoTemplate,"%hostname::::sys%%timereported::::time%%timegenerated::::time_rcvd%%msg%%syslogfacility-text::::syslog_fac%%syslogseverity-text::::syslog_server%%syslogtag::::syslog_tag%%programname::::procid%%procid::::pid%%$!foo::::foo%%$!abc::::renamed%"
Note that JSON escaping is actually undesirable in this mode (should it
be silently ignored?), $!all-json doesn't yet work as expected, and all
data is stored as strings.
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| |
|
|
|
|
| |
This does not yet do anything.
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| |\ |
|
| | | |
|
| | | |
|
| |\ \
| |/
|/|
| |
| | |
Conflicts:
runtime/msg.c
|
| | |
| |
| |
| | |
also some cleanup
|
| | | |
|
| | | |
|
| | | |
|
| | | |
|
| | |\ |
|
| | | | |
|
| | | | |
|
| |\ \ \ |
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
%$!all-json% will return a {}-wrapped object if there are are any
events, or when there is an attached (empty) pMsg->event, but an empty
string if nothing is attached. Let it return an empty object "{}" in
that case for consistency. In particular, this allows
$template MongoTemplate,"{%hostname:::jsonf:sys%, %$!all-json:2:$:%"
to always result in a valid JSON.
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
JSON fields are "name":value, not "name"=value. Therefore change the
jsonf flag to use a colon.
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
It does nothing, at is just confusing.
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| | | | |
| | | |
| | | |
| | | | |
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
JSON fields are "name":value, not "name"=value. Therefore change the
jsonf flag to use a colon.
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
It does nothing, at is just confusing.
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| | |_|/
|/| |
| | |
| | | |
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|
| |\| |
| |/
|/|
| |
| |
| |
| |
| | |
Conflicts:
ChangeLog
configure.ac
runtime/ruleset.c
tools/syslogd.c
|
| | |\
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Conflicts:
ChangeLog
action.c
configure.ac
doc/manual.html
runtime/ruleset.c
template.h
threads.c
tools/syslogd.c
|
| | | |\
| | | |
| | | |
| | | |
| | | | |
Conflicts:
template.c
|
| | | | |
| | | |
| | | |
| | | |
| | | | |
see template.c file header for details
Note that this functionality was almost never used in practice
|
| | | | | |
|
| | | |\|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Conflicts:
ChangeLog
configure.ac
doc/manual.html
|
| | | | | |
|
| | | | | |
|
| | | | |
| | | |
| | | |
| | | | |
Thanks to Andre Lorbach for mentioning this.
|
| | | |\|
| | | |
| | | |
| | | |
| | | | |
Conflicts:
runtime/ruleset.c
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This lead to queue file corruption. While the root cause is a config
error, it is a bug that this important and hard to find config error
was not detected by rsyslog.
|
| | | | |
| | | |
| | | |
| | | | |
This is done to prevent name claches with libraries.
|
| | |\ \ \ |
|
| | | | | | |
|
| | | |\ \ \
| | | | |/
| | | |/| |
|
| | | | | | |
|
| | | | | | |
|
| | | | | |
| | | | |
| | | | |
| | | | | |
some more elaborate patch is needed and will be provided
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
note that none of the rsyslog-provided plugins does this
Thanks to bodik and Rohit Prasad for alerting us on this bug and
analyzing it.
fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=347
|
| | | | | | |
|
| | | | | | |
|
| | |\ \ \ \
| | | |/ /
| | |/| | |
|
| | | | | |
| | | | |
| | | | |
| | | | | |
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
|