[rsyslog] liblognorm problems...
Champ Clark III [Softwink]
champ at softwink.com
Thu Dec 16 20:41:18 CET 2010
> Understood. This is really rough PoC code. I know I have a
> "ip=" field, but I'm unclear on how to "call" that from
> ee_getEventField(event, ??) ...
> I'm assuming I inform ee_getEventField to obtain the "ip"
> field, then use ee_getFieldValueAsStr to get the value. Correct?
Argh. I'm such a dork :)
You know, sometimes it's better to just go to bed and pick
up the next morning. This morning, I reviewed what Rainer had said,
and had it working in about 5 minutes.
I wasn't using es_newStrFromBuf() buff correctly at all! So hence,
ee_getEventField() would obviously fail. Anyways, in my PoC
code I did a:
propName = es_newStrFromBuf("ip", 2); /* Yes, terrible, just wanted
see it work */
... and what do you know? I get the value I was looking
for. Man, sometimes I get to excited, I end up missing the most
simple things :) Thanks for the suggestions and hard work on
Champ Clark III | Softwink, Inc | 800-538-9357 x 101
GPG Key ID: 58A2A58F
Key fingerprint = 7734 2A1C 007D 581E BDF7 6AD5 0F1F 655F 58A2 A58F
If it wasn't for C, we'd be using BASI, PASAL and OBOL.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 197 bytes
Desc: not available
More information about the rsyslog