User: dlang Forumlink: http://kb.monitorware.com/viewtopic.php?p=24280#p24280 Message: ---------- rsyslog does not currently have a way to do this. normally we say to run the output through sed or equivalent, but inserting into ES prevents that solution.