[rsyslog] liblognorm, libee and libestr has been released

Champ Clark III [Softwink] champ at softwink.com
Fri Dec 10 19:29:14 CET 2010


On Fri, Dec 10, 2010 at 01:16:45PM +0100, Tom Bergfeld wrote:
> Hi all,
> 
> we have just released liblognorm, libee and libestr.
> 
> liblognorm 0.1.0 has been released
> Thursday, December 9th, 2010

	First off,  congrat's on the release.  I know it's still far
from done,  but it's a great stepping stone. 

	I had the chance to play with liblognorm a bit today.  It's
pretty dang straight forward.  I have one question (code snip it):

es_emptyStr(str);
ee_fmtEventToRFC5424(event, &str);
cstr = es_str2cstr(str, NULL);
printf("Normalize: '%s'\n", cstr);

	.. And everything normalizes as expected .. 

[cee at 115 port="48973" ip="192.168.0.1" tag="sshd[4416\]" host="myhost" date="Dec 10 12:13:50"]

	How do I pull just the "ip" field? That is,  how to I pull seperated
fields (ip, tag, host, date, etc)?   This is probably a simple question,  
but figured I might ask.  I'll continue looking around. 

-- 
        Champ Clark III | Softwink, Inc | 800-538-9357 x 101
                     http://www.softwink.com

GPG Key ID: 58A2A58F
Key fingerprint = 7734 2A1C 007D 581E BDF7  6AD5 0F1F 655F 58A2 A58F
If it wasn't for C, we'd be using BASI, PASAL and OBOL.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.adiscon.net/pipermail/rsyslog/attachments/20101210/308220c7/attachment.pgp>


More information about the rsyslog mailing list