[rsyslog-notify] Forum Thread: TSV data into mongodb - (Mode 'post')

[noreply at adiscon.com]

User: toddaa 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25544#p25544

Message: 
----------
Hello,

I recently began playing around with pushing logs from server to server
using imtcp and find it to work quite well.  I have configured the log to
write to a file and I get a file.  I'm currently attempting(failing) to
redirect the log to a mongodb collection.  Actually, I do have it working,
but the original message from the other server is all bundled in a single
records cell.  Using the mongoimport cli utility on the log file and
specifying field names it works great...exactly what I want.  But I haven't
been so lucky configuring rsyslogd to do the same thing.

My data is currently TSV.  I've found some really good articles about using
mmjsonparse to split up the message, but unfortunately I'm not starting
with JSON.  Does anyone know of a way to split up the %msg% field by the
tab character and insert them as separate fields in the mongodb collection?
 

Thanks!

Aaron