[rsyslog-notify] Forum Thread: Re: omfile with DynFile & %syslogfacility-text% - (Mode 'reply')
noreply at adiscon.com
noreply at adiscon.com
Tue Feb 24 12:03:27 CET 2015
User: AirOnSkin
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25273#p25273
Message:
----------
dlang,
Thanks for your reply. Switching to the RSYSLOG_ForwardFormat really
resolved the mentioned issue. I wasn't aware, that the syslogfacility and
syslogseverity are still "there" in the transmitted message. I thought,
that if I can't see it in the text, it's lost.
But there is another reason why I would like to have the facility &
severety in the log. That's because later on I'm importing these messages
in Logstash and I'd like to filter these fields (feature of Logstash) so
I'll be able to search for specific fields (facility, severity) in
Logstash.
In what way can I have the syslogfacility-text & syslogseverity-text
information in the log message withouth "breaking" the
RSYSLOG_ForwardFormat order?
Cheers,
Stefan
More information about the rsyslog-notify
mailing list