# Similar to snare_ccoff_udp_2, but with a different template. This template # has triggered problems in the past, thus a test is granted. # added 2010-03-21 rgerhards $ModLoad ../plugins/omstdout/.libs/omstdout $IncludeConfig nettest.input.conf # This picks the to be tested input from the test driver! $ErrorMessagesToStderr off # snare usses HT as field delimiter, so many users have turned off # control character escaping to make any sense at all from these messages... $EscapeControlCharactersOnReceive off # we need to use a fixed timestamp, as otherwise we can not compare :( # This could be improved in later versions of the testing tools, but requires # modification to the rsyslog core... $template fmt,"insert into windows (Message, Facility,FromHost, Priority, DeviceReportedTime, ReceivedAt, InfoUnitID, SysLogTag) values ('%msg:::space-cc%', %syslogfacility%, '%HOSTNAME%',%syslogpriority%, '20100321185328', '20100321185328', %iut%, '%syslogtag:::space-cc%')\n",sql *.* :omstdout:;fmt