[rsyslog-notify] Forum Thread: Re: omfile with DynFile & %syslogfacility-text% - (Mode 'reply')

noreply at adiscon.com noreply at adiscon.com
Tue Feb 24 12:03:27 CET 2015


User: AirOnSkin 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25273#p25273

Message: 
----------
dlang,

Thanks for your reply. Switching to the RSYSLOG_ForwardFormat really
resolved the mentioned issue. I wasn't aware, that the syslogfacility and
syslogseverity are still "there" in the transmitted message. I thought,
that if I can't see it in the text, it's lost.

But there is another reason why I would like to have the facility &
severety in the log. That's because later on I'm importing these messages
in Logstash and I'd like to filter these fields (feature of Logstash) so
I'll be able to search for specific fields (facility, severity) in
Logstash.
In what way can I have the syslogfacility-text & syslogseverity-text
information in the log message withouth "breaking" the
RSYSLOG_ForwardFormat order?

Cheers,
Stefan


More information about the rsyslog-notify mailing list