summaryrefslogtreecommitdiffstats
path: root/doc/property_replacer.html
Commit message (Collapse)AuthorAgeFilesLines
* Add support for optional JSON fieldsHEADommongodbMiloslav Trmač2012-08-281-0/+4
| | | | | | | | These fields are only relevant in field templates (i.e. mongodb): a field for a non-existent CEE property is not created (instead of being set to an empty string). Signed-off-by: Miloslav Trmač <mitr@redhat.com>
* INCOMPATIBLE: use :, not =, as separator for jsonfMiloslav Trmač2012-08-261-1/+1
| | | | | | | JSON fields are "name":value, not "name"=value. Therefore change the jsonf flag to use a colon. Signed-off-by: Miloslav Trmač <mitr@redhat.com>
* added capability to specify substrings for field extraction modeRainer Gerhards2012-04-261-0/+9
|
* added the "jsonf" property replacer option (and fieldname) & bugfixRainer Gerhards2012-04-191-3/+27
| | | | | bugfix: property replacer option "json" could lead to content loss message was truncated if escaping was necessary
* Merge branch 'v6-stable'Rainer Gerhards2012-04-181-0/+4
|\ | | | | | | | | | | | | Conflicts: runtime/msg.c runtime/ruleset.c runtime/ruleset.h
| * doc: added new $uptime propertyRainer Gerhards2012-04-131-0/+4
| |
* | added "date-unixtimestamp" property replacer option to format as a unix ↵Rainer Gerhards2012-03-291-0/+4
| | | | | | | | timestamp
* | added "json" property replacer optionRainer Gerhards2012-03-161-0/+6
| |
* | added message property parsesuccess to indicate status of higher level ↵Rainer Gerhards2012-03-151-0/+19
|/ | | | | | | | parser run added message property parsesuccess to indicate if the last run higher-level parser could successfully parse the message or not (see property replacer html doc for details)
* Merge branch 'v5-stable' into betaRainer Gerhards2011-10-211-2/+1
|\ | | | | | | | | Conflicts: doc/rsyslog_recording_pri.html
| * Merge branch 'v4-stable' into v5-stableRainer Gerhards2011-10-201-2/+2
| |\
| | * doc bug: property pri-text was incorrectly describedRainer Gerhards2011-10-201-2/+2
| | |
* | | doc on using liblognorm-created properties was massingRainer Gerhards2011-04-111-0/+8
|/ /
* / enhance: added $BOM system property to ease writing byte order masksRainer Gerhards2011-03-221-0/+6
|/
* added new property replacer option "date-rfc3164-buggyday"Rainer Gerhards2010-03-081-0/+13
| | | | | primarily to ease migration from syslog-ng. See property replacer doc for details. [backport from 5.5.3 because urgently needed by some]
* removed long-obsoleted property UxTradMsgRainer Gerhards2009-06-161-4/+0
| | | | | ... as well as some cleanup (some commented-out code is left to support UxTradMsg again is someone really complains ;)).
* added new "csv" property replacer optionRainer Gerhards2009-04-021-1/+13
| | | | | to enable simple creation of CSV-formatted outputs (format from RFC4180 is used)
* Merge branch 'beta'Rainer Gerhards2008-11-181-0/+11
|\ | | | | | | | | | | | | | | | | Conflicts: ChangeLog configure.ac doc/manual.html doc/property_replacer.html
| * Merge branch 'v3-stable' into betaRainer Gerhards2008-11-111-2/+14
| |\ | | | | | | | | | | | | | | | | | | Conflicts: ChangeLog doc/manual.html
| | * enhance: regex nomatch option "ZERO" has been addedRainer Gerhards2008-11-111-2/+3
| | | | | | | | | | | | | | | | | | This allows to return the string 0 if a regular expression is not found. This is probably useful for storing numerical values into database columns.
| | * doc update: documented how to specify multiple property replacer optionsRainer Gerhards2008-11-101-0/+11
| | | | | | | | | | | | abd link to new online regex generator tool added
* | | improved doc on property replacer regular expressionsRainer Gerhards2008-11-111-7/+3
| | |
* | | restructured rsyslog.conf documentationTom Bergfeld2008-10-311-0/+10
|/ / | | | | | | Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
* | added properties "inputname" and "$myhostname"Rainer Gerhards2008-09-101-3/+24
| | | | | | | | | | | | | | | | - added message property "inputname", which contains the name of the input (module) that generated it. Presence is depending on suport in each input module (else it is blank). - added system property "$myhostname", which contains the name of the local host as it knows itself.
* | added doc for new property replacer featureRainer Gerhards2008-09-101-1/+23
|/ | | | (see previous commit)
* Merge branch 'v3-stable' into betaRainer Gerhards2008-07-181-3/+37
|\ | | | | | | | | | | | | Conflicts: doc/property_replacer.html tools/syslogd.c
| * added new poperty replacer option, added missing documentationRainer Gerhards2008-07-181-4/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - added a new property replacer option "sp-if-no-1st-sp" to cover a problem with RFC 3164 based interpreation of tag separation. While it is a generic approach, it fixes a format problem introduced in 3.18.0, where kernel messages no longer had a space after the tag. This is done by a modifcation of the default templates. Please note that this may affect some messages where there intentionally is no space between the tag and the first character of the message content. If so, this needs to be worked around via a specific template. However, we consider this scenario to be quite remote and, even if it exists, it is not expected that it will actually cause problems with log parsers (instead, we assume the new default template behaviour may fix previous problems with log parsers due to the missing space). - doc bugfix: property replacer options secpath-replace and secpath-drop were not documented
* | added new property replacer option "time-subseconds"Rainer Gerhards2008-06-061-0/+4
| | | | | | | | enables to query just the subsecond part of a high-precision timestamp
* | enhanced property replacer to support multiple regex matchesRainer Gerhards2008-06-041-2/+9
| |
* | capability for replacement text in no match regex case addedRainer Gerhards2008-05-301-3/+10
| | | | | | | | | | | | implemented in property replacer: if a regular expression does not match, it can now either return "**NO MATCH** (default, as before), a blank property or the full original property text
* | enhanced property replacer's regex to support submatchesRainer Gerhards2008-05-291-2/+13
| | | | | | | | | | | | | | - enabled Posix ERE expressions inside the property replacer (previously BRE was permitted only) - provided ability to specify that a regular expression submatch shall be used inside the property replacer
* | added fromhost-ip properties and some bugfixesRainer Gerhards2008-05-161-2/+8
|/ | | | | | | | | | - bugfix: TCP input modules did incorrectly set fromhost property (always blank) - bugfix: imklog did not set fromhost property - added "fromhost-ip" property - added "RSYSLOG_DebugFormat" canned template - bugfix: hostname and fromhost were swapped when a persisted message (in queued mode) was read in
* properties are now case-insensitive everywhere (script, filters, templates)Rainer Gerhards2008-04-031-24/+22
|
* added $HHOUR and $QHOUR system properties - can be used for half- andRainer Gerhards2008-03-251-140/+274
| | | | quarter-hour logfile rotation
* clarified dependency of control character property replacer options toRainer Gerhards2008-02-121-3/+12
| | | | $EscapeControlCharactersOnReceive
* added new propertiesRainer Gerhards2007-07-111-1/+8
|
* added doc to the $NOW family of propertiesRainer Gerhards2007-07-101-1/+10
|
* documented new dynamic file naming featureRainer Gerhards2007-07-041-6/+17
|
* added new document on recording syslog priority to log filesRainer Gerhards2007-06-181-2/+13
|
* add a new and some old, so far forgotten, propertiesRainer Gerhards2007-06-151-98/+110
|
* preparing doc for 1.13.0 releasev1-13-0Rainer Gerhards2006-12-191-1/+4
|
* doc update for new escape-cc, drop-cc and space-cc property replacerRainer Gerhards2006-11-171-1/+8
| | | | options
* updated doc to reflect new field-delimiter configuration capabilityRainer Gerhards2006-09-271-2/+10
|
* finalized field-support in property replacer (doc updated)Rainer Gerhards2005-12-231-1/+3
|
* made "!progname" fully BSD-compliant; added property "programname"Rainer Gerhards2005-10-191-1/+3
|
* updated doc to match 1.10 feature setRainer Gerhards2005-09-201-1/+10
|
* added new FROMHOST property to docRainer Gerhards2005-09-131-0/+3
|
* begun to move the documentation to html (and create better doc)Rainer Gerhards2005-08-041-0/+64