[rsyslog] liblognorm problems...

[Champ Clark III [Softwink]]

> 	Understood.   This is really rough PoC code.  I know I have a 
> "ip=" field,  but I'm unclear on how to "call" that from
> ee_getEventField(event, ??) ... 
> 
> 	I'm assuming I inform ee_getEventField to obtain the "ip" 
> field,  then use ee_getFieldValueAsStr to get the value.  Correct?

	Argh.  I'm such a dork :)

	You know,  sometimes it's better to just go to bed and pick
up the next morning.  This morning,  I reviewed what Rainer had said, 
and had it working in about 5 minutes.  

I wasn't using es_newStrFromBuf() buff correctly at all!  So hence, 
ee_getEventField() would obviously fail.  Anyways,  in my PoC 
code I did a:

propName = es_newStrFromBuf("ip", 2);  /* Yes, terrible, just wanted 
					  see it work */

	... and what do you know?  I get the value I was looking
for.  Man,  sometimes I get to excited,  I end up missing the most
simple things :)  Thanks for the suggestions and hard work on
liblognorm. 

-- 
        Champ Clark III | Softwink, Inc | 800-538-9357 x 101
                     http://www.softwink.com

GPG Key ID: 58A2A58F
Key fingerprint = 7734 2A1C 007D 581E BDF7  6AD5 0F1F 655F 58A2 A58F
If it wasn't for C, we'd be using BASI, PASAL and OBOL.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.adiscon.net/pipermail/rsyslog/attachments/20101216/7f2754ad/attachment.pgp>