From 1de902c0da504ae1dcde8a43f5328df88be84016 Mon Sep 17 00:00:00 2001 From: Rainer Gerhards Date: Tue, 10 Jul 2007 07:01:09 +0000 Subject: added doc to the $NOW family of properties --- doc/property_replacer.html | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) (limited to 'doc/property_replacer.html') diff --git a/doc/property_replacer.html b/doc/property_replacer.html index c45486e8..f4be4832 100644 --- a/doc/property_replacer.html +++ b/doc/property_replacer.html @@ -56,9 +56,18 @@ only seconds) draft draft-ietf-syslog-protocol PROCIDThe contents of the PROCID field from IETF draft draft-ietf-syslog-protocol -MSGIDThe contents of the MSGID field from IETF draft +MSGIDThe contents of the MSGID field from IETF draft draft-ietf-syslog-protocol +$NOWThe current date stamp in the format YYYY-MM-DD +$YEARThe current year (4-digit) +$MONTHThe current month (2-digit) +$DAYThe current day of the month (2-digit) +$HOURThe current hour in military (24 hour) time + (2-digit) +$MINUTEThe current minute (2-digit) +

Properties starting with a $-sign are so-called system properties. These do +NOT stem from the message but are rather internally-generated.

Character Positions

FromChar and toChar are used to build substrings. They specify the offset within the string that should be copied. Offset counting starts at 1, so if you need to -- cgit